f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 108.400897] binder: BINDER_SET_CONTEXT_MGR already set [ 108.400909] binder: 17358:17362 ioctl 40046207 0 returned -16 [ 108.401867] binder_alloc: 17292: binder_alloc_buf, no vma 2018/01/25 21:01:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0x98, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72"}) 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000e3000)=""/20) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000814000)=@assoc_id=0x0, &(0x7f00002be000)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 108.401899] binder: 17358:17362 transaction failed 29189/-3, size 40-0 line 2903 [ 108.412247] audit: type=1326 audit(1516914094.458:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17365 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x0 2018/01/25 21:01:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000787000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000b8c000-0x16)='/selinux/checkreqprot\x00', 0x141f40, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000349000-0x50)={@common='bpq0\x00', @ifru_names=@common='yam0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 5: r0 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00005f3000)='/selinux/user\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00001e9000)='./file0\x00', 0x676f1d571a949f9b, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000c50000)=[{r0, 0x10, 0x0}, {r1, 0x85, 0x0}, {r2, 0x400, 0x0}, {r3, 0x2400, 0x0}], 0x4, &(0x7f0000b7a000)={r4, r5+10000000}, &(0x7f0000001000-0x8)={0x4}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f000044b000-0x4)=0x0) syz_open_procfs(r0, &(0x7f0000b8b000)='pagemap\x00') r1 = syz_open_dev$usbmon(&(0x7f00003fd000)='/dev/usbmon#\x00', 0x855, 0x20000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00003f3000-0xc)={0xa4ad, 0xfffffffffffff2fb, 0x0}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000b55000)={0x1, 0x0}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000996000-0xc)={0x4, [0xde1, 0x2, 0x1, 0x1]}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000f9a000)={0x80002004, 0x0}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000dfe000)=0x0) 2018/01/25 21:01:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = syz_open_dev$vcsa(&(0x7f0000caf000-0xb)='/dev/vcsa#\x00', 0xffffffffffffff00, 0x4000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000eb4000-0x2)={0x7, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f000070e000)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r2, &(0x7f0000477000)={'system_u:object_r:dhcpd_state_t:s0', 0x20, 'system_u\x00'}, 0x2c) 2018/01/25 21:01:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000e3000)=""/20) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000814000)=@assoc_id=0x0, &(0x7f00002be000)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xb1, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67"}) [ 108.415789] binder: BINDER_SET_CONTEXT_MGR already set [ 108.415798] binder: 17363:17369 ioctl 40046207 0 returned -16 [ 108.415870] binder: 17363:17369 ERROR: BC_REGISTER_LOOPER called without request [ 108.417587] binder_alloc: 17252: binder_alloc_buf, no vma 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000033000-0xb)='/dev/vcsa#\x00', 0xd, 0x200000) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000a54000-0xd5)="1c36721858d396c4f11208ab665397be742506a997687b9dc22a8c03b0319bb9fc5db808577dc17d203101ca755c90ec10bfff0a47885eba91741ba7a801fea95f5b3e6d3e7219df620a171d98efe1855a8b78536ba6ce4ab9aed57ce2efb9ffa57cb5465b044c569fe252830389781482002addaa45bb8c269589604b7ae682c2665691c9af683a5d971c62559a090eea968decde223d631505ee413307d4ea0962b8c00e6b63575b037db2c71939dcb34d4457d34ca171c6cf5b9a2ebb1a86d4c9e13978d551e5b8331ef8b9e766c7e1be7885c1") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000e3000)=""/20) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000814000)=@assoc_id=0x0, &(0x7f00002be000)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 108.417592] binder: 17360:17366 got reply transaction with no transaction stack 2018/01/25 21:01:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xb1, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67"}) 2018/01/25 21:01:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000f04000)='/dev/usbmon#\x00', 0x100000001, 0x2000) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000b39000-0x8)=0x1) r2 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000e3000)=""/20) r2 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 108.417601] binder: 17360:17366 transaction failed 29201/-71, size 0-0 line 2703 [ 108.417610] binder: 17363:17369 transaction failed 29189/-3, size 24-0 line 2903 [ 108.429741] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.429772] binder: 17364:17368 transaction failed 29189/-3, size 0-0 line 2903 2018/01/25 21:01:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000723000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x224000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) fcntl$setpipe(r1, 0x407, 0x4) accept$unix(r1, &(0x7f00006d4000-0x3b)=@file={0x0, ""/57}, &(0x7f0000d86000-0x4)=0x3b) 2018/01/25 21:01:35 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000720000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl(r0, 0x80000000, &(0x7f0000b5f000-0x62)="bcca21a3b148412e2e41054955bdd50c38f4335c8a70d650945d9e4ea580fbedb909125ede3bf0d8e9d07593d710096aa863251cbd25427ae60db5540dd1f737b76090abfa2366543e009a21042cf8b963465e53da7341402013be51afca2c21724e") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000019f000)='/dev/ppp\x00', 0x404080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000001000-0x10)={&(0x7f00003f3000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = dup2(r1, r2) r4 = syz_open_dev$sndtimer(&(0x7f0000b46000)='/dev/snd/timer\x00', 0x0, 0x206000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000714000)={0x0, 0x20, 0x3, 0x4, 0x8, 0x3}, &(0x7f00003df000)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00008b7000)={r5, 0x81}, &(0x7f00002a1000)=0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r4, 0x21, 0x17, &(0x7f0000a9c000-0x4)=0x0, &(0x7f0000b75000-0x4)=0x4) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000f99000-0x1000)=""/4096) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f00000c6000)={0x2, 0x6, 0x6, 0x1, &(0x7f0000ce1000)=[{0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}, {0x0, 0x0, 0x0, 0x0, ""/44, 0x0}], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendto(r2, &(0x7f0000c6c000-0xbe)="e94728e9b775009de9ad79b3fcc6fba8b7f290cbf07d66f7bdd4c031571b0e4e5134383cbe39b052a9d24cfc7f82197f48cfd343281b1458240c1650fb922658a4e4520cf71cb86482f7016e81edd59c4dc8296f69c63a14048896be872700ca37733f55ee005fcff431d3940a5d948354612e51052fd5559dd695715634e25f789da1a013576fc6df549b18a0be0dd40dd5905737d6042f17edf1a3a3aad4d2c50fd5de4c22fd95172f2127d5f0fc3785ebcc46cbfc3251557ab9cb7d0d", 0xbe, 0xc0, &(0x7f00003d9000-0x1e)=@pppoe={0x18, 0x0, {0x2, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @common='eql\x00'}}, 0x1e) connect$ax25(r3, &(0x7f0000c85000-0x10)={0x3, {"e1d6eb259cbcae"}, 0x2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000d5f000)={&(0x7f0000000000/0x1000)=nil, 0x8001, 0x7, 0x40, &(0x7f0000672000/0x2000)=nil, 0x101}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000e19000-0x4)=0x0, &(0x7f0000f08000-0x4)=0x4) 2018/01/25 21:01:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xb1, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67"}) 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000e3000)=""/20) r2 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f00000de000)='/dev/net/tun\x00', 0x0, 0x301000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001000)={0xaa, 0x0, 0x0}) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x1000000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) waitid(0x0, 0x0, &(0x7f0000013000)={0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000004000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b6c000)="", &(0x7f00008a3000)=0x0, &(0x7f000057c000)=0x0, &(0x7f0000ac4000)="") r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00004ad000-0x9)='/dev/dsp\x00', 0x20000, 0x0) getdents64(r3, &(0x7f00004fb000)=""/130, 0x82) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00009a2000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r4 = syz_open_dev$mice(&(0x7f00000e6000-0x10)='/dev/input/mice\x00', 0x0, 0x90042) recvfrom$ipx(r4, &(0x7f00009df000)=""/42, 0x2a, 0x22, &(0x7f00009d4000)={0x4, 0x6, 0x9, "978c787ba7ac", 0x8, 0x0}, 0x10) ioctl$TUNSETNOCSUM(r1, 0x400454c8, &(0x7f000093a000)=0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f000096e000)={0x1, 0x800, 0x5ce, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet6_int(r4, 0x29, 0x38, &(0x7f0000d82000-0x4)=0x0, &(0x7f0000bee000-0x4)=0x4) clock_gettime(0x0, &(0x7f000022c000-0x10)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000083f000-0x50)={0x0, @time={r5, r6+10000000}, 0x7fff, {0xfffffffffffffff7, 0x6}, 0x7, 0x0, 0xc2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00001a8000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000472000)=0x6) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x0, 0x4) r8 = creat(&(0x7f0000ce8000)='./file0\x00', 0x83) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000cad000-0xc)={0x80000012, 0x0}) [ 108.436203] binder: 17360:17374 got reply transaction with no transaction stack [ 108.436213] binder: 17360:17374 transaction failed 29201/-71, size 0-0 line 2703 [ 108.442279] binder_alloc: binder_alloc_mmap_handler: 17358 20000000-20002000 already mapped failed -16 [ 108.444359] binder: BINDER_SET_CONTEXT_MGR already set [ 108.444372] binder: 17358:17362 ioctl 40046207 0 returned -16 [ 108.456994] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xbe, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24"}) 2018/01/25 21:01:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000993000)={0x6, r0, 0x0}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000859000-0x10)={0x4, &(0x7f00009e0000-0x78)=[{0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}]}) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000a6e000-0x10)=[@in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) readv(r2, &(0x7f0000f12000)=[{&(0x7f00003e5000-0x59)=""/89, 0x59}], 0x1) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000c54000)={{0xa, 0x1, 0xc2, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x10000000}, {0xa, 0x2, 0x81, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf}, 0x6}, 0x14, [0x400, 0x2, 0x4, 0x7fffffff, 0x8, 0xffff, 0xffff, 0x5]}, 0x5c) socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 108.457007] binder: 17376:17377 ioctl 40046207 0 returned -16 [ 108.457203] binder: 17376:17377 ERROR: BC_REGISTER_LOOPER called without request 2018/01/25 21:01:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xbe, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24"}) 2018/01/25 21:01:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0xf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 108.458729] binder_alloc: 17252: binder_alloc_buf, no vma [ 108.458753] binder: 17376:17377 transaction failed 29189/-3, size 24-0 line 2903 [ 108.459801] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.459834] binder: 17358:17373 transaction failed 29189/-3, size 40-0 line 2903 [ 108.471743] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.471770] binder: 17364:17368 transaction failed 29189/-3, size 0-0 line 2903 [ 108.506931] binder: 17387:17390 got reply transaction with no transaction stack [ 108.506942] binder: 17387:17390 transaction failed 29201/-71, size 0-0 line 2703 [ 108.518546] audit: type=1326 audit(1516914094.563:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17365 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x0 [ 108.522825] binder: BINDER_SET_CONTEXT_MGR already set [ 108.522834] binder: 17385:17388 ioctl 40046207 0 returned -16 [ 108.524159] binder: 17385:17388 ERROR: BC_REGISTER_LOOPER called without request [ 108.526432] binder_alloc: 17252: binder_alloc_buf, no vma [ 108.526455] binder: 17385:17388 transaction failed 29189/-3, size 24-0 line 2903 [ 108.531592] binder: 17387:17392 got reply transaction with no transaction stack [ 108.531603] binder: 17387:17392 transaction failed 29201/-71, size 0-0 line 2703 [ 108.595517] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.595545] binder: 17394:17395 transaction failed 29189/-3, size 0-0 line 2903 [ 108.602125] binder: 17397:17406 BC_ACQUIRE_DONE node 460 has no pending acquire request [ 108.602144] binder: 17397:17406 got reply transaction with bad transaction stack, transaction 461 has target 17397:0 [ 108.602155] binder: 17397:17406 transaction failed 29201/-71, size 0-0 line 2718 [ 108.602520] binder: BINDER_SET_CONTEXT_MGR already set [ 108.602529] binder: 17399:17407 ioctl 40046207 0 returned -16 [ 108.602617] binder: 17399:17407 ERROR: BC_REGISTER_LOOPER called without request [ 108.604878] binder_alloc: 17252: binder_alloc_buf, no vma [ 108.604902] binder: 17399:17407 transaction failed 29189/-3, size 24-0 line 2903 [ 108.610176] binder: 17403:17408 got reply transaction with no transaction stack [ 108.610186] binder: 17403:17408 transaction failed 29201/-71, size 0-0 line 2703 [ 108.633926] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.633953] binder: 17394:17395 transaction failed 29189/-3, size 0-0 line 2903 [ 108.658905] binder: BINDER_SET_CONTEXT_MGR already set [ 108.658916] binder: 17397:17419 ioctl 40046207 0 returned -16 [ 108.661607] binder_alloc: 17397: binder_alloc_buf, no vma [ 108.661644] binder: 17397:17406 transaction failed 29189/-3, size 40-0 line 2903 [ 108.661691] binder: 17397:17419 BC_ACQUIRE_DONE u0000000000000000 no match [ 108.661700] binder: 17397:17419 got reply transaction with no transaction stack [ 108.661708] binder: 17397:17419 transaction failed 29201/-71, size 0-0 line 2703 [ 108.685790] binder: BINDER_SET_CONTEXT_MGR already set [ 108.685802] binder: 17423:17427 ioctl 40046207 0 returned -16 [ 108.685877] binder: 17423:17427 ERROR: BC_REGISTER_LOOPER called without request [ 108.687609] binder_alloc: 17252: binder_alloc_buf, no vma [ 108.687635] binder: 17423:17427 transaction failed 29189/-3, size 24-0 line 2903 [ 108.697498] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.697518] binder: 17426:17428 transaction failed 29189/-3, size 0-0 line 2903 [ 108.708284] binder: 17430:17434 ioctl c0106426 20844ff0 returned -22 [ 108.708355] binder: 17430:17434 ioctl 4c08 ffffffffffffffff returned -22 [ 108.709843] binder: 17430:17434 got reply transaction with no transaction stack [ 108.709852] binder: 17430:17434 transaction failed 29201/-71, size 0-0 line 2703 [ 108.723120] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.723145] binder: 17426:17442 transaction failed 29189/-3, size 0-0 line 2903 [ 108.732701] binder: BINDER_SET_CONTEXT_MGR already set [ 108.732712] binder: 17436:17440 ioctl 40046207 0 returned -16 [ 108.738999] binder_alloc: 17397: binder_alloc_buf, no vma [ 108.739069] binder: 17436:17440 transaction failed 29189/-3, size 40-0 line 2903 [ 108.743180] binder: 17430:17434 ioctl c0106426 20844ff0 returned -22 [ 108.746109] binder: 17430:17438 ioctl 4c08 ffffffffffffffff returned -22 [ 108.747342] binder: BINDER_SET_CONTEXT_MGR already set [ 108.747351] binder: 17439:17444 ioctl 40046207 0 returned -16 [ 108.747432] binder: 17439:17444 ERROR: BC_REGISTER_LOOPER called without request [ 108.748808] binder: 17430:17434 got reply transaction with no transaction stack [ 108.748818] binder: 17430:17434 transaction failed 29201/-71, size 0-0 line 2703 [ 108.752280] binder_alloc: 17252: binder_alloc_buf, no vma [ 108.752303] binder: 17439:17444 transaction failed 29189/-3, size 24-0 line 2903 [ 108.767410] binder: BINDER_SET_CONTEXT_MGR already set [ 108.767420] binder: 17436:17446 ioctl 40046207 0 returned -16 [ 108.773206] binder_alloc: 17397: binder_alloc_buf, no vma [ 108.773237] binder: 17436:17440 transaction failed 29189/-3, size 40-0 line 2903 [ 108.824353] binder: BINDER_SET_CONTEXT_MGR already set [ 108.824366] binder: 17453:17455 ioctl 40046207 0 returned -16 [ 108.824948] binder_alloc: 17292: binder_alloc_buf, no vma 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xbe, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24"}) 2018/01/25 21:01:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$void(r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000171000)='/selinux/enforce\x00', 0x141000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000045e000-0x8)={0x0, 0xeb}, &(0x7f0000321000)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000f5b000)={r2, 0x1, 0x5, 0x2076, 0x5ebf, 0x5}, 0x14) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f000077f000)={0x1, 0x6, 0x2, 0x5, 0x1}) 2018/01/25 21:01:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b85000-0xc)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f9a000)={0x80002004, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008e8000-0xb)='/dev/hwrng\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000c94000)={0x9, 0x73b2f6b9}) 2018/01/25 21:01:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f000039d000)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 108.824974] binder: 17451:17459 transaction failed 29189/-3, size 0-0 line 2903 [ 108.829672] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.829705] binder: 17453:17455 transaction failed 29189/-3, size 40-0 line 2903 [ 108.834745] binder: 17452:17462 got reply transaction with no transaction stack [ 108.834760] binder: 17452:17462 transaction failed 29201/-71, size 0-0 line 2703 [ 108.844047] binder: BINDER_SET_CONTEXT_MGR already set [ 108.844058] binder: 17458:17461 ioctl 40046207 0 returned -16 [ 108.844137] binder: 17458:17461 ERROR: BC_REGISTER_LOOPER called without request 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc4, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894"}) 2018/01/25 21:01:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 108.845830] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.845856] binder: 17450:17463 transaction failed 29189/-3, size 0-8 line 2903 [ 108.847779] binder_alloc: 17252: binder_alloc_buf, no vma 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c9b000-0x30)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = dup2(r0, r1) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000ac5000-0x38)=""/56, &(0x7f0000118000-0x4)=0x38) 2018/01/25 21:01:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000b5f000-0x30)={0x44, 0x0, &(0x7f0000b7b000)=[], 0xffffffffffffffa4, 0x0, &(0x7f0000919000-0x1e)=""}) [ 108.847802] binder: 17458:17461 transaction failed 29189/-3, size 24-0 line 2903 [ 108.858406] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.858436] binder: 17451:17464 transaction failed 29189/-3, size 0-0 line 2903 [ 108.859580] binder: 17452:17467 got reply transaction with no transaction stack [ 108.859590] binder: 17452:17467 transaction failed 29201/-71, size 0-0 line 2703 [ 108.877191] binder: BINDER_SET_CONTEXT_MGR already set [ 108.877203] binder: 17453:17469 ioctl 40046207 0 returned -16 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc4, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894"}) 2018/01/25 21:01:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000df2000-0x9)='/dev/ppp\x00', 0x201, 0x0) r1 = syz_open_dev$audion(&(0x7f000043a000)='/dev/audio#\x00', 0xffff, 0x4100) lookup_dcookie(0x80000000, &(0x7f0000e7c000-0xbb)=""/187, 0xbb) flistxattr(r0, &(0x7f00000f3000)=""/49, 0x31) syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00002fb000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) r3 = syz_open_dev$admmidi(&(0x7f0000eff000-0xe)='/dev/admmidi#\x00', 0x9, 0x20000) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000ad2000-0x80)={[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000cd0000)={0x7fffffff, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000866000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x6, 0x444480) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000c0a000)={0x0, 0x3, 0x10000, 0x6, 0x8, 0xffffffffffffffff, 0x400, 0xa622, {0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x3ff, 0xa5cb, 0x1, 0x8}}, &(0x7f0000000000)=0xb8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00001ff000-0x28)={@generic="2ab797becd32ab599a32f3da1839afc9", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00009ae000)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @broadcast=0x0}, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ff5000-0x4)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000ed8000-0xe8)={{{@in=@empty=0x0, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x2, 0x2, 0x2, 0x0, 0xa, 0x20, 0xa0, 0x3e, r2, r3}, {0x8, 0xe5, 0x7, 0x5, 0xfff, 0xfffffffffffffffa, 0xd64, 0x3}, {0x4, 0x2e, 0x2, 0x1}, 0x6, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x3}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x3, 0xff}, 0xa, @in=@empty=0x0, 0x4, 0x0, 0x3, 0x6, 0x9, 0x1f, 0x0}}, 0xe8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc4, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894"}) 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 108.882579] binder_alloc: 17292: binder_alloc_buf, no vma [ 108.882612] binder: 17453:17455 transaction failed 29189/-3, size 40-0 line 2903 [ 108.921422] binder: 17479:17481 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 108.927227] binder: 17476:17480 got reply transaction with no transaction stack 2018/01/25 21:01:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc7, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b"}) 2018/01/25 21:01:36 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000164000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f000073a000-0x4)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00006b8000-0x8)={0x1, r1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 108.927236] binder: 17476:17480 transaction failed 29201/-71, size 0-0 line 2703 [ 108.940571] binder_alloc: 17292: binder_alloc_buf, no vma 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000003000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000d5a000-0xa)='/dev/vcs#\x00', 0x9, 0x10000) mq_timedreceive(r2, &(0x7f000078d000-0x85)=""/133, 0x85, 0x8, &(0x7f000033e000-0x10)={0x77359400, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00006d6000-0x4)={0x0, ""}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x4c, 0x0, &(0x7f0000d89000)=[@acquire={0x40046305, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) truncate(&(0x7f00002bf000-0x8)='./file0\x00', 0x0) 2018/01/25 21:01:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3f, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:36 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) semget$private(0x0, 0x3, 0x286) r1 = epoll_create1(0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000a2e000)={0x28, 0x0, 0x2711, @host=0x2, 0x0}, 0x10, 0x80000) recvmmsg(r2, &(0x7f000037c000-0x168)=[{{&(0x7f000063b000-0x10)=@ethernet={0x0, @random=""/6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000217000)=[{&(0x7f0000df0000)=""/178, 0xb2}, {&(0x7f0000d7e000)=""/91, 0x5b}, {&(0x7f00009f0000)=""/218, 0xda}, {&(0x7f00009b4000-0xb2)=""/178, 0xb2}], 0x4, &(0x7f0000339000)=""/152, 0x98, 0x100000001}, 0x7ff}, {{&(0x7f0000f52000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0}}, 0x2e, &(0x7f0000341000)=[{&(0x7f000004b000)=""/181, 0xb5}, {&(0x7f0000a54000)=""/4096, 0x1000}, {&(0x7f00009ec000)=""/221, 0xdd}, {&(0x7f000051f000-0x66)=""/102, 0x66}, {&(0x7f000009a000-0xe8)=""/232, 0xe8}, {&(0x7f0000fe3000-0xf5)=""/245, 0xf5}, {&(0x7f000006d000-0xe6)=""/230, 0xe6}, {&(0x7f00005a9000)=""/48, 0x30}, {&(0x7f0000626000)=""/158, 0x9e}, {&(0x7f0000f00000-0x33)=""/51, 0x33}], 0xa, &(0x7f0000836000)=""/105, 0x69, 0xc1b3}, 0x2}, {{&(0x7f0000d97000-0xe)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f0000a3f000)=[{&(0x7f00005a7000-0xb3)=""/179, 0xb3}], 0x1, &(0x7f0000235000-0x91)=""/145, 0x91, 0x100}, 0x36}, {{0x0, 0x0, &(0x7f0000bf5000-0x20)=[{&(0x7f00006bc000)=""/125, 0x7d}, {&(0x7f0000cce000)=""/144, 0x90}], 0x2, 0x0, 0x0, 0x6}, 0x4}, {{&(0x7f0000d52000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, 0x60, &(0x7f0000092000-0xa0)=[{&(0x7f00000d6000)=""/4096, 0x1000}, {&(0x7f0000229000-0x43)=""/67, 0x43}, {&(0x7f0000101000)=""/40, 0x28}, {&(0x7f0000180000-0x5d)=""/93, 0x5d}, {&(0x7f0000df7000)=""/7, 0x7}, {&(0x7f0000502000-0x68)=""/104, 0x68}, {&(0x7f00008e2000-0x89)=""/137, 0x89}, {&(0x7f0000155000-0x1000)=""/4096, 0x1000}, {&(0x7f0000cef000)=""/221, 0xdd}, {&(0x7f000072b000-0x26)=""/38, 0x26}], 0xa, &(0x7f0000f78000-0x1a)=""/26, 0x1a, 0x8}, 0xffffffffffffffff}, {{&(0x7f00001ca000)=@pptp={0x0, 0x0, {0x0, @multicast1=0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, &(0x7f0000b64000)=[{&(0x7f000016f000-0x1000)=""/4096, 0x1000}, {&(0x7f0000d26000-0x19)=""/25, 0x19}], 0x2, &(0x7f0000a7f000-0x8e)=""/142, 0x8e, 0x0}, 0x5}], 0x6, 0x40000062, &(0x7f0000fb9000-0x10)={0x77359400, 0x0}) socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000070000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc7, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b"}) [ 108.940597] binder: 17482:17484 transaction failed 29189/-3, size 0-8 line 2903 [ 109.101636] binder_alloc: 17292: binder_alloc_buf, no vma 2018/01/25 21:01:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13a, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) syz_extract_tcp_res$synack(&(0x7f0000629000)={0x0, 0x0}, 0x1, 0x0) 2018/01/25 21:01:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc7, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b"}) 2018/01/25 21:01:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) syz_open_dev$evdev(&(0x7f00006c0000-0x12)='/dev/input/event#\x00', 0x1000, 0x103400) read(r0, &(0x7f000068e000)=""/28, 0x1c) r2 = syz_open_dev$sndpcmp(&(0x7f000040e000-0x12)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80000) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000c1c000-0x68)={0x2, 0x0, [{0x11, 0x2, 0x0, 0x0, @adapter={0x0, 0x7ff, 0x1, 0x7, 0x85e}}, {0x5, 0x2, 0x0, 0x0, @sint={0x4, 0x3}}]}) 2018/01/25 21:01:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000e0e000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fstat(r0, &(0x7f0000a9f000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00001ea000-0xb)='/dev/audio\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f0000002000-0x8)=[{r0, 0x2200, 0x0}], 0x1, 0x6a5e) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001000-0x4)=0x6, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00002ed000-0x8)=""/8, &(0x7f0000d4f000)=0x8) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$kcm(0x29, 0x8040000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 109.101662] binder: 17490:17494 transaction failed 29189/-3, size 0-8 line 2903 [ 109.106287] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.106314] binder: 17489:17497 transaction failed 29189/-3, size 0-8 line 2903 [ 109.115772] binder: BINDER_SET_CONTEXT_MGR already set [ 109.115781] binder: 17493:17498 ioctl 40046207 0 returned -16 2018/01/25 21:01:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000278000-0x9)='/dev/ppp\x00', 0x40000, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00001c8000-0x4)=0x1, 0x4) pipe2(&(0x7f0000f33000-0x8)={0x0, 0x0}, 0x4800) renameat(r1, &(0x7f0000bb4000)='./file0\x00', r2, &(0x7f0000194000-0x8)='./file0\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000cc0000)={@common='tunl0\x00', @ifru_flags=0x1000}) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc9, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b8097"}) 2018/01/25 21:01:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) [ 109.115854] binder: 17493:17498 ERROR: BC_REGISTER_LOOPER called without request [ 109.117501] binder_alloc: 17252: binder_alloc_buf, no vma 2018/01/25 21:01:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept4$ipx(r0, 0x0, &(0x7f000011e000+0xead)=0x0, 0x80000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchmod(r1, 0x42) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:36 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) [ 109.117527] binder: 17493:17498 transaction failed 29189/-3, size 24-0 line 2903 [ 109.118161] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/25 21:01:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc9, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b8097"}) 2018/01/25 21:01:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000db8000)="7662010400007431656d307b2f00") r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000af4000)='/dev/amidi#\x00', 0x1, 0x301100) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000938000)=0x103002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 109.118171] binder: 17488:17492 ioctl 40046207 0 returned -16 [ 109.119006] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.119074] binder: 17488:17492 transaction failed 29189/-3, size 40-0 line 2903 [ 109.130344] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.130367] binder: 17496:17500 transaction failed 29189/-3, size 0-0 line 2903 [ 109.146346] binder: 17495:17503 got reply transaction with no transaction stack [ 109.146357] binder: 17495:17503 transaction failed 29201/-71, size 0-0 line 2703 [ 109.154250] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.154277] binder: 17502:17505 transaction failed 29189/-3, size 0-8 line 2903 [ 109.185554] binder: BINDER_SET_CONTEXT_MGR already set [ 109.185567] binder: 17488:17492 ioctl 40046207 0 returned -16 [ 109.185703] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.185734] binder: 17488:17508 transaction failed 29189/-3, size 40-0 line 2903 [ 109.186961] binder: BINDER_SET_CONTEXT_MGR already set [ 109.186970] binder: 17511:17515 ioctl 40046207 0 returned -16 [ 109.188094] binder: 17511:17515 ERROR: BC_REGISTER_LOOPER called without request [ 109.189761] binder_alloc: 17252: binder_alloc_buf, no vma [ 109.189787] binder: 17511:17515 transaction failed 29189/-3, size 24-0 line 2903 [ 109.205071] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.205097] binder: 17507:17510 transaction failed 29189/-3, size 0-8 line 2903 [ 109.214732] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.214756] binder: 17512:17517 transaction failed 29189/-3, size 0-8 line 2903 [ 109.244322] binder: BINDER_SET_CONTEXT_MGR already set [ 109.244335] binder: 17521:17528 ioctl 40046207 0 returned -16 [ 109.245968] binder: 17518:17525 got reply transaction with no transaction stack [ 109.245977] binder: 17518:17525 transaction failed 29201/-71, size 0-0 line 2703 [ 109.246530] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.246585] binder: 17521:17528 transaction failed 29189/-3, size 40-0 line 2903 [ 109.249086] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.249110] binder: 17529:17531 transaction failed 29189/-3, size 0-8 line 2903 [ 109.256037] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.256061] binder: 17523:17532 transaction failed 29189/-3, size 0-8 line 2903 [ 109.276648] binder: BINDER_SET_CONTEXT_MGR already set [ 109.276660] binder: 17527:17533 ioctl 40046207 0 returned -16 [ 109.277186] binder: 17518:17525 got reply transaction with no transaction stack [ 109.277197] binder: 17518:17525 transaction failed 29201/-71, size 0-0 line 2703 [ 109.277299] binder: 17527:17533 ERROR: BC_REGISTER_LOOPER called without request 2018/01/25 21:01:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind(r0, &(0x7f0000f56000)=@pptp={0x18, 0x2, {0x2, @remote={0xac, 0x14, 0x0, 0xbb}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x1000000000040005, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:37 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000878000)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000eea000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x800000000000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000eea000)='encrypted\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, r2, &(0x7f0000001000-0xc0)=""/192, 0xc0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000860000-0x30)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0xffffff76, 0x0, &(0x7f0000eea000)='|'}) 2018/01/25 21:01:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xc9, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b8097"}) 2018/01/25 21:01:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000bac000-0x9)='/dev/vcs\x00', 0x125002, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000625000)="f28fc7598f5446190aecfc8287d188505ecf655c0bec4b6642de67e226fe424606667213919c801582d4bf34d5531c20b44d4130671700c97d187fccc783af67beeb4e1e7cfee6c132d3cf", 0x4b) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ca2000-0x15)='/proc/self/net/pfkey\x00', 0x800, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000c01000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f000020d000-0x4)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00003c1000)={@loopback={0x0, 0x1}, r2}, 0x14) 2018/01/25 21:01:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 109.279850] audit: type=1400 audit(1516914095.325:698): avc: denied { dac_override } for pid=17520 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 109.283249] binder_alloc: 17252: binder_alloc_buf, no vma [ 109.283277] binder: 17527:17533 transaction failed 29189/-3, size 24-0 line 2903 [ 109.291970] audit: type=1400 audit(1516914095.338:699): avc: denied { dac_read_search } for pid=17520 comm="syz-executor2" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/01/25 21:01:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 109.302149] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.302170] binder: 17538:17540 transaction failed 29189/-3, size 0-8 line 2903 [ 109.321885] binder: 17541:17544 got reply transaction with no transaction stack [ 109.321895] binder: 17541:17544 transaction failed 29201/-71, size 0-0 line 2703 [ 109.322711] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.322736] binder: 17537:17539 transaction failed 29189/-3, size 0-8 line 2903 [ 109.324873] binder_alloc: binder_alloc_mmap_handler: 17521 20000000-20002000 already mapped failed -16 [ 109.332369] binder: BINDER_SET_CONTEXT_MGR already set [ 109.332379] binder: 17521:17547 ioctl 40046207 0 returned -16 [ 109.335299] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.335334] binder: 17521:17528 transaction failed 29189/-3, size 40-0 line 2903 [ 109.336425] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.336480] binder: 17519:17548 transaction failed 29189/-3, size 0-0 line 2903 [ 109.344957] binder: 17521:17542 BC_ACQUIRE_DONE u0000000000000000 no match [ 109.344969] binder: 17521:17542 got reply transaction with no transaction stack [ 109.344979] binder: 17521:17542 transaction failed 29201/-71, size 0-0 line 2703 [ 109.350860] binder: 17541:17550 got reply transaction with no transaction stack [ 109.350871] binder: 17541:17550 transaction failed 29201/-71, size 0-0 line 2703 [ 109.354581] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.354607] binder: 17546:17551 transaction failed 29189/-3, size 0-8 line 2903 [ 109.366508] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.366536] binder: 17519:17554 transaction failed 29189/-3, size 0-0 line 2903 [ 109.368722] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.368753] binder: 17555:17558 transaction failed 29189/-3, size 0-8 line 2903 [ 109.390832] binder: BINDER_SET_CONTEXT_MGR already set [ 109.390843] binder: 17552:17557 ioctl 40046207 0 returned -16 [ 109.390920] binder: 17552:17557 ERROR: BC_REGISTER_LOOPER called without request [ 109.393052] binder_alloc: 17252: binder_alloc_buf, no vma [ 109.393079] binder: 17552:17557 transaction failed 29189/-3, size 24-0 line 2903 [ 109.463533] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.463560] binder: 17567:17573 transaction failed 29189/-3, size 0-8 line 2903 [ 109.465520] binder: BINDER_SET_CONTEXT_MGR already set [ 109.465535] binder: 17566:17569 ioctl 40046207 0 returned -16 [ 109.466625] binder: 17566:17569 ERROR: BC_REGISTER_LOOPER called without request [ 109.470488] binder_alloc: 17252: binder_alloc_buf, no vma [ 109.470512] binder: 17566:17569 transaction failed 29189/-3, size 24-0 line 2903 [ 109.471906] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.471931] binder: 17568:17575 transaction failed 29189/-3, size 0-8 line 2903 [ 109.501126] binder: 17574:17580 got reply transaction with no transaction stack [ 109.501135] binder: 17574:17580 transaction failed 29201/-71, size 0-0 line 2703 [ 109.507209] binder: BINDER_SET_CONTEXT_MGR already set [ 109.507219] binder: 17565:17579 ioctl 40046207 0 returned -16 [ 109.511947] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.512155] binder: 17565:17579 transaction failed 29189/-3, size 40-0 line 2903 [ 109.514273] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.514297] binder: 17581:17583 transaction failed 29189/-3, size 0-8 line 2903 [ 109.522104] binder: BINDER_SET_CONTEXT_MGR already set [ 109.522113] binder: 17586:17587 ioctl 40046207 0 returned -16 [ 109.522186] binder: 17586:17587 ERROR: BC_REGISTER_LOOPER called without request [ 109.523709] binder_alloc: 17252: binder_alloc_buf, no vma [ 109.523753] binder: 17586:17587 transaction failed 29189/-3, size 24-0 line 2903 [ 109.530939] binder: 17574:17580 got reply transaction with no transaction stack [ 109.530948] binder: 17574:17580 transaction failed 29201/-71, size 0-0 line 2703 [ 109.532497] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.532519] binder: 17584:17585 transaction failed 29189/-3, size 0-8 line 2903 [ 109.542924] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.542948] binder: 17589:17593 transaction failed 29189/-3, size 0-8 line 2903 [ 109.557603] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.557629] binder: 17570:17578 transaction failed 29189/-3, size 0-0 line 2903 [ 109.561923] binder: BINDER_SET_CONTEXT_MGR already set [ 109.561934] binder: 17594:17596 ioctl 40046207 0 returned -16 [ 109.562040] binder: 17594:17596 ERROR: BC_REGISTER_LOOPER called without request [ 109.563481] binder_alloc: 17252: binder_alloc_buf, no vma [ 109.563506] binder: 17594:17596 transaction failed 29189/-3, size 24-0 line 2903 [ 109.569532] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.569559] binder: 17595:17598 transaction failed 29189/-3, size 0-8 line 2903 [ 109.589527] audit: type=1400 audit(1516914095.636:700): avc: denied { net_raw } for pid=17588 comm="syz-executor2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 109.603350] binder: BINDER_SET_CONTEXT_MGR already set [ 109.603361] binder: 17565:17579 ioctl 40046207 0 returned -16 [ 109.605849] binder: 17565:17590 BC_ACQUIRE_DONE u0000000000000000 no match [ 109.605861] binder: 17565:17590 got reply transaction with no transaction stack [ 109.605871] binder: 17565:17590 transaction failed 29201/-71, size 0-0 line 2703 [ 109.606287] binder_alloc: 17292: binder_alloc_buf, no vma [ 109.606361] binder: 17565:17579 transaction failed 29189/-3, size 40-0 line 2903 [ 109.614417] binder: 17602:17604 got reply transaction with no transaction stack [ 109.614427] binder: 17602:17604 transaction failed 29201/-71, size 0-0 line 2703 [ 110.137893] binder: BINDER_SET_CONTEXT_MGR already set [ 110.137905] binder: 17608:17612 ioctl 40046207 0 returned -16 [ 110.138689] binder: 17608:17612 ERROR: BC_REGISTER_LOOPER called without request [ 110.140644] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.140696] binder: 17608:17612 transaction failed 29189/-3, size 24-0 line 2903 [ 110.142127] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.142151] binder: 17609:17613 transaction failed 29189/-3, size 0-8 line 2903 [ 110.146085] binder: 17611:17615 ioctl 0 0 returned -22 [ 110.146185] binder: BINDER_SET_CONTEXT_MGR already set [ 110.146194] binder: 17611:17615 ioctl 40046207 0 returned -16 [ 110.147115] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.147145] binder: 17611:17615 transaction failed 29189/-3, size 40-0 line 2903 [ 110.148006] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.148068] binder: 17607:17619 transaction failed 29189/-3, size 0-8 line 2903 [ 110.157166] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.157189] binder: 17616:17622 transaction failed 29189/-3, size 0-0 line 2903 [ 110.160754] binder: 17614:17620 got reply transaction with no transaction stack [ 110.160762] binder: 17614:17620 transaction failed 29201/-71, size 0-0 line 2703 [ 110.174863] binder: 17611:17623 ioctl 0 0 returned -22 [ 110.178299] binder: BINDER_SET_CONTEXT_MGR already set [ 110.178312] binder: 17611:17615 ioctl 40046207 0 returned -16 [ 110.178383] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.178409] binder: 17611:17623 transaction failed 29189/-3, size 40-0 line 2903 [ 110.187852] binder: 17611:17615 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.187867] binder: 17611:17615 got reply transaction with no transaction stack [ 110.187875] binder: 17611:17615 transaction failed 29201/-71, size 0-0 line 2703 [ 110.189091] binder: 17614:17628 got reply transaction with no transaction stack [ 110.189101] binder: 17614:17628 transaction failed 29201/-71, size 0-0 line 2703 [ 110.199189] binder: BINDER_SET_CONTEXT_MGR already set [ 110.199200] binder: 17625:17627 ioctl 40046207 0 returned -16 [ 110.199526] binder: 17625:17627 ERROR: BC_REGISTER_LOOPER called without request [ 110.201383] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.201410] binder: 17625:17627 transaction failed 29189/-3, size 24-0 line 2903 [ 110.233710] binder: 17638:17639 unknown command 0 [ 110.233721] binder: 17638:17639 ioctl c0306201 20b5efd0 returned -22 [ 110.235547] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.235581] binder: 17632:17635 transaction failed 29189/-3, size 0-8 line 2903 [ 110.235599] binder: BINDER_SET_CONTEXT_MGR already set [ 110.235609] binder: 17633:17637 ioctl 40046207 0 returned -16 [ 110.236570] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.236604] binder: 17633:17637 transaction failed 29189/-3, size 40-0 line 2903 [ 110.238056] binder: 17638:17640 unknown command 0 [ 110.238066] binder: 17638:17640 ioctl c0306201 20b5efd0 returned -22 [ 110.265189] binder: BINDER_SET_CONTEXT_MGR already set [ 110.265199] binder: 17633:17641 ioctl 40046207 0 returned -16 [ 110.267883] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.267915] binder: 17633:17637 transaction failed 29189/-3, size 40-0 line 2903 [ 110.267956] binder: 17633:17641 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.267963] binder: 17633:17641 got reply transaction with no transaction stack [ 110.267971] binder: 17633:17641 transaction failed 29201/-71, size 0-0 line 2703 [ 110.302729] binder: 17642:17646 got reply transaction with no transaction stack [ 110.302739] binder: 17642:17646 transaction failed 29201/-71, size 0-0 line 2703 [ 110.306714] binder: BINDER_SET_CONTEXT_MGR already set [ 110.306724] binder: 17643:17648 ioctl 40046207 0 returned -16 [ 110.306792] binder: 17643:17648 ERROR: BC_REGISTER_LOOPER called without request [ 110.308725] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.308749] binder: 17643:17648 transaction failed 29189/-3, size 24-0 line 2903 [ 110.314878] audit: type=1400 audit(1516914096.361:701): avc: denied { net_admin } for pid=17644 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 110.319594] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.319619] binder: 17647:17651 transaction failed 29189/-3, size 0-8 line 2903 [ 110.335119] binder: BINDER_SET_CONTEXT_MGR already set [ 110.335131] binder: 17653:17658 ioctl 40046207 0 returned -16 [ 110.335989] binder_alloc: 17397: binder_alloc_buf, no vma [ 110.336076] binder: 17653:17658 transaction failed 29189/-3, size 40-0 line 2903 [ 110.354659] binder: BINDER_SET_CONTEXT_MGR already set [ 110.354670] binder: 17659:17661 ioctl 40046207 0 returned -16 [ 110.354760] binder: 17659:17661 ERROR: BC_REGISTER_LOOPER called without request [ 110.356606] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.356634] binder: 17659:17661 transaction failed 29189/-3, size 24-0 line 2903 [ 110.358819] binder: 17642:17646 got reply transaction with no transaction stack [ 110.358830] binder: 17642:17646 transaction failed 29201/-71, size 0-0 line 2703 [ 110.367744] binder: BINDER_SET_CONTEXT_MGR already set [ 110.367755] binder: 17653:17665 ioctl 40046207 0 returned -16 [ 110.368595] binder: 17662:17663 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.368607] binder: 17662:17663 got reply transaction with no transaction stack [ 110.368616] binder: 17662:17663 transaction failed 29201/-71, size 0-0 line 2703 [ 110.370474] binder_alloc: 17397: binder_alloc_buf, no vma [ 110.370509] binder: 17653:17658 transaction failed 29189/-3, size 40-0 line 2903 [ 110.370551] binder: 17653:17665 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.370559] binder: 17653:17665 got reply transaction with no transaction stack [ 110.370566] binder: 17653:17665 transaction failed 29201/-71, size 0-0 line 2703 [ 110.407394] binder: BINDER_SET_CONTEXT_MGR already set [ 110.407406] binder: 17668:17670 ioctl 40046207 0 returned -16 [ 110.407837] binder: 17668:17670 ERROR: BC_REGISTER_LOOPER called without request [ 110.409434] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.409460] binder: 17668:17670 transaction failed 29189/-3, size 24-0 line 2903 [ 110.423610] binder: BINDER_SET_CONTEXT_MGR already set [ 110.423621] binder: 17675:17678 ioctl 40046207 0 returned -16 [ 110.424516] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.424547] binder: 17675:17678 transaction failed 29189/-3, size 40-0 line 2903 [ 110.440316] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.440344] binder: 17679:17681 transaction failed 29189/-3, size 0-0 line 2903 [ 110.449464] binder: 17672:17684 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.449477] binder: 17672:17684 got reply transaction with no transaction stack [ 110.449486] binder: 17672:17684 transaction failed 29201/-71, size 0-0 line 2703 [ 110.467497] binder: BINDER_SET_CONTEXT_MGR already set [ 110.467507] binder: 17683:17685 ioctl 40046207 0 returned -16 [ 110.467658] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.467692] binder: 17675:17687 transaction failed 29189/-3, size 40-0 line 2903 [ 110.467739] binder: 17683:17685 ERROR: BC_REGISTER_LOOPER called without request [ 110.467811] binder: BINDER_SET_CONTEXT_MGR already set [ 110.467820] binder: 17675:17678 ioctl 40046207 0 returned -16 [ 110.469487] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.469510] binder: 17683:17685 transaction failed 29189/-3, size 24-0 line 2903 [ 110.469667] binder: 17675:17678 got reply transaction with no transaction stack [ 110.469676] binder: 17675:17678 transaction failed 29201/-71, size 0-0 line 2703 [ 110.505997] binder: 17690:17692 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.506049] binder: 17690:17692 got reply transaction with no transaction stack [ 110.506059] binder: 17690:17692 transaction failed 29201/-71, size 0-0 line 2703 [ 110.509700] binder: 17693:17697 got reply transaction with no transaction stack [ 110.509710] binder: 17693:17697 transaction failed 29201/-71, size 0-314 line 2703 [ 110.512102] binder: BINDER_SET_CONTEXT_MGR already set [ 110.512113] binder: 17695:17698 ioctl 40046207 0 returned -16 [ 110.512198] binder: 17695:17698 ERROR: BC_REGISTER_LOOPER called without request [ 110.513793] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.513819] binder: 17695:17698 transaction failed 29189/-3, size 24-0 line 2903 [ 110.525121] binder: 17693:17704 got reply transaction with no transaction stack [ 110.525133] binder: 17693:17704 transaction failed 29201/-71, size 0-314 line 2703 [ 110.528684] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.528717] binder: 17696:17699 transaction failed 29189/-3, size 0-0 line 2903 [ 110.542314] binder: BINDER_SET_CONTEXT_MGR already set [ 110.542325] binder: 17701:17706 ioctl 40046207 0 returned -16 [ 110.543780] audit: type=1400 audit(1516914096.590:702): avc: denied { setuid } for pid=17701 comm="syz-executor4" capability=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 110.546663] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.546691] binder: 17701:17706 transaction failed 29189/-3, size 40-0 line 2903 [ 110.560967] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.561060] binder: 17696:17699 transaction failed 29189/-3, size 0-0 line 2903 [ 110.569364] binder: BINDER_SET_CONTEXT_MGR already set [ 110.569373] binder: 17709:17711 ioctl 40046207 0 returned -16 [ 110.569425] binder: 17710:17712 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.569437] binder: 17710:17712 got reply transaction with no transaction stack [ 110.569446] binder: 17710:17712 transaction failed 29201/-71, size 0-0 line 2703 [ 110.571125] binder: BINDER_SET_CONTEXT_MGR already set [ 110.571136] binder: 17701:17706 ioctl 40046207 0 returned -16 [ 110.574063] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.574088] binder: 17701:17715 transaction failed 29189/-3, size 40-0 line 2903 [ 110.587430] binder: BINDER_SET_CONTEXT_MGR already set [ 110.587441] binder: 17713:17717 ioctl 40046207 0 returned -16 [ 110.587521] binder: 17713:17717 ERROR: BC_REGISTER_LOOPER called without request [ 110.600439] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.600468] binder: 17713:17717 transaction failed 29189/-3, size 24-0 line 2903 [ 110.607789] binder: BINDER_SET_CONTEXT_MGR already set [ 110.607801] binder: 17723:17725 ioctl 40046207 0 returned -16 [ 110.608712] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.608747] binder: 17723:17725 transaction failed 29189/-3, size 40-0 line 2903 [ 110.619181] binder: BINDER_SET_CONTEXT_MGR already set [ 110.619191] binder: 17709:17711 ioctl 40046207 0 returned -16 [ 110.627233] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.627259] binder: 17721:17722 transaction failed 29189/-3, size 0-0 line 2903 [ 110.628572] binder: BINDER_SET_CONTEXT_MGR already set [ 110.628583] binder: 17723:17725 ioctl 40046207 0 returned -16 [ 110.629124] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.629150] binder: 17723:17732 transaction failed 29189/-3, size 40-0 line 2903 [ 110.630072] binder: 17728:17731 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.630083] binder: 17728:17731 got reply transaction with no transaction stack [ 110.630092] binder: 17728:17731 transaction failed 29201/-71, size 0-0 line 2703 [ 110.644622] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.644652] binder: 17721:17730 transaction failed 29189/-3, size 0-0 line 2903 [ 110.657948] binder: BINDER_SET_CONTEXT_MGR already set [ 110.657961] binder: 17735:17736 ioctl 40046207 0 returned -16 [ 110.658131] binder: 17735:17736 ERROR: BC_REGISTER_LOOPER called without request [ 110.659607] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.659635] binder: 17735:17736 transaction failed 29189/-3, size 24-0 line 2903 [ 110.689138] binder: 17741:17743 got reply transaction with no transaction stack [ 110.689147] binder: 17741:17743 transaction failed 29201/-71, size 0-0 line 2703 [ 110.696332] binder: 17738:17740 BC_ACQUIRE_DONE u0000000000000000 no match [ 110.696344] binder: 17738:17740 got reply transaction with no transaction stack [ 110.696353] binder: 17738:17740 transaction failed 29201/-71, size 0-0 line 2703 [ 110.697655] binder: 17741:17743 got reply transaction with no transaction stack [ 110.697664] binder: 17741:17743 transaction failed 29201/-71, size 0-0 line 2703 [ 110.982976] binder: BINDER_SET_CONTEXT_MGR already set [ 110.982986] binder: 17749:17755 ioctl 40046207 0 returned -16 [ 110.983150] binder_alloc: 17292: binder_alloc_buf, no vma [ 110.983179] binder: 17752:17756 transaction failed 29189/-3, size 0-0 line 2903 [ 110.983251] binder: 17749:17755 ERROR: BC_REGISTER_LOOPER called without request [ 110.986908] binder_alloc: 17252: binder_alloc_buf, no vma [ 110.986931] binder: 17749:17755 transaction failed 29189/-3, size 24-0 line 2903 [ 111.000243] binder_alloc: 17292: binder_alloc_buf, no vma [ 111.000278] binder: 17746:17754 transaction failed 29189/-3, size 0-0 line 2903 [ 111.012706] binder_alloc: 17292: binder_alloc_buf, no vma [ 111.012731] binder: 17751:17758 transaction failed 29189/-3, size 0-0 line 2903 [ 111.032727] binder_alloc: 17292: binder_alloc_buf, no vma [ 111.032762] binder: 17767:17770 transaction failed 29189/-3, size 0-0 line 2903 [ 111.043909] binder: 17750:17773 got reply transaction with no transaction stack [ 111.043918] binder: 17750:17773 transaction failed 29201/-71, size 0-0 line 2703 [ 111.044085] binder_alloc: 17292: binder_alloc_buf, no vma [ 111.044114] binder: 17766:17769 transaction failed 29189/-3, size 0-0 line 2903 [ 111.047993] binder_alloc: 17292: binder_alloc_buf, no vma [ 111.048045] binder: 17751:17758 transaction failed 29189/-3, size 0-0 line 2903 [ 111.068082] binder: 17750:17776 got reply transaction with no transaction stack [ 111.068092] binder: 17750:17776 transaction failed 29201/-71, size 0-0 line 2703 [ 112.848909] binder: send failed reply for transaction 422, target dead [ 112.855668] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.855697] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.855749] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.855799] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.855894] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.855942] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.855987] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856055] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856077] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856164] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.856185] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.856248] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856427] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856469] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.856487] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.856593] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856673] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856682] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856760] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.856802] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.856939] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.857096] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.857116] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.857218] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.857285] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.857294] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.857388] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.857434] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.857580] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.857677] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.857685] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.857735] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.857785] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.857917] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.857983] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858059] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858134] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858182] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.858206] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.858294] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858371] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858450] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858497] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858593] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858604] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858660] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858709] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858758] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.858782] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.858828] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858909] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.858999] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.859054] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.859102] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859149] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859189] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859261] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859311] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.859373] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859416] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859531] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859578] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859646] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.859748] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859812] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.859823] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.859874] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859897] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.859947] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860248] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860259] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860357] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.860405] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860427] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860538] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.860562] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.860648] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860672] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860753] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.860775] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.860921] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.860984] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.860994] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861106] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.861185] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861234] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861368] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861450] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861512] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861592] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861647] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861697] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861849] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.861993] binder: release 17252:17261 transaction 419 out, still active [ 112.862045] binder: send failed reply for transaction 419, target dead [ 112.868634] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.868686] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.868749] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.868786] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.868939] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.868969] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.868978] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869194] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869224] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869232] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.869434] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869465] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.869474] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869576] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869606] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869615] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.869919] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869966] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.869975] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/25 21:01:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000af1000)='/dev/cuse\x00', 0x10002, 0x0) getsockname$ax25(r0, &(0x7f0000963000)={0x0, {""/7}, 0x0}, &(0x7f0000f07000)=0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000b55000)={0x10000000, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = syz_open_dev$vcsa(&(0x7f0000caf000-0xb)='/dev/vcsa#\x00', 0xffffffffffffff00, 0x4000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000eb4000-0x2)={0x7, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f000070e000)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r2, &(0x7f0000477000)={'system_u:object_r:dhcpd_state_t:s0', 0x20, 'system_u\x00'}, 0x2c) 2018/01/25 21:01:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000e1e000-0x8)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000867000-0x90)={[0x8, 0x9, 0x214, 0x0, 0x100000000, 0x3, 0x3, 0x200000000000000, 0xc83, 0x3, 0x7, 0x2, 0x0, 0x8, 0x4, 0x9], 0x1f000, 0x200}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f000014c000)='/dev/dmmidi#\x00', 0x8, 0x0) r1 = getpid() getresuid(&(0x7f00001a6000)=0x0, &(0x7f0000350000-0x4)=0x0, &(0x7f000052e000)=0x0) getgroups(0x9, &(0x7f0000cd4000)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) r6 = syz_open_dev$urandom(&(0x7f00008b9000)='/dev/urandom\x00', 0x0, 0x8000) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000031f000-0x8)='/selinux/member\x00', 0x2, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000987000)={&(0x7f0000db6000)='./file0\x00', 0x0, 0x18}, 0x10) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e6a000-0x10)='/dev/sequencer2\x00', 0x40000, 0x0) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f000036a000-0x16)='/selinux/checkreqprot\x00', 0x80, 0x0) r11 = accept(0xffffffffffffffff, &(0x7f0000b36000-0x80)=@generic={0x0, ""/126}, &(0x7f0000f19000-0x4)=0x80) r12 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000a93000-0xb)={0x0, 0x0, 0x0}, &(0x7f00007ce000-0x4)=0xc) lstat(&(0x7f0000afe000-0x8)='./file0\x00', &(0x7f000058a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000cf4000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f57000)=0xe8) getresgid(&(0x7f000054f000-0x4)=0x0, &(0x7f000088d000-0x4)=0x0, &(0x7f0000a51000-0x4)=0x0) sendmsg$netlink(r0, &(0x7f0000ba4000-0x38)={&(0x7f0000ffc000-0xc)=@proc={0x10, 0x0, 0x1, 0xd0000c0}, 0xc, &(0x7f00009f8000)=[{&(0x7f0000b6a000)={0x1160, 0x15, 0x202, 0x5, 0x0, "", [@generic="e823b3c2452c5e21769d07b08e9a4e2cac86a56180b167935e00c1eb7a30a67ae08e9333cbb288f6075451a28a50a6427ad99ab9b84f36e7a838efc8f0151556ce403e709a38df9aaa0d04532bde47792cc2c2b63da347dc34b889ebb21692ce6b1967f1705f924da1b6dffd93ff54868c1db4733ed946bc443f3adbdf68589101e567a83b213fa70e64750dc31d42f15ae57f0372b32d412c87e771dfcff14bf1efadda72de36b4f47a271a582edda234015e4fd08cda44b33228b11b879d31f745e9bde698d9843a053fc6547c", @nested={0x74, 0x5a, [@generic="34770fb626d4f4ec6a93f65d82f638414a84add222bd4576660f47e18db30951f0fa3e80e126c4616c45c4c984fa3fb43eb1b6c57ffb9893ee2d729535d172f8dc17e8c673eb73ecef16487c5eb05d17dca78f177022648a59a6d0e6461ab9fdfcda94132f82c9b25a681b0ff84fd5"]}, @typed={0xc, 0x62, @u32=0x1}, @generic="9bff77b218ff2992402ae904936ee294c3cf85bc3d62b79bdb67366244252ad1c245577c19719ca5c1a7d0ef38b1c5ce95887d129b5a21b7b933b7d0fb6583499a0e2755bf70ac6a75b854562d912a598333cbaae364adc4d87aecd60c81a2eb45c6fe391bd89fa36fd7a0e546387903ee661bfd0d16648a869930d7f185d606c1d7c717b34c58fe88ce41e1e426185f9532ba56bd8c47077d07130be056b66c169ea1cd8770ff76dd7e0f115fa532d61973a9a53fcc75e3dd6b2b86fb57c9f952168288d0505c4819b3d9cc493159478cae24622c10a0a2baf60f4f6bacf416537bff73fe64ad4c51697ddacb6dda8437e43aefbe847c40a08765f7466e4f281b895c7c60e05490fef236343fc8353d044b8e120044abaf38a1aa9b6b26cce356af4ab663b843462f0f32e9eb3a2c7f2365d0a8235ceb75407b5f2025205afdbe5e789227f12862f629cdf0b0950f904dee39069d389c6f2c2cf6f89e09c6e2e26fe5e23cb1d0c72bcaea4c68592358ca425afe8da264bc57e215792c037db83dc94583559f184af22ed4521698933b7ccf9ae459a4a63d7d8b41f40e26539f4607128a47087e36b55879f242954b309430f6d0aa29a400d52d4f9ceba35865fecb8e304270c3bacd9a51c3608092cf38186aff7b71cc3e3e9456207dc5a08dbf9b654a3620fc0b35b1539146a4ed3f9b004e213044da145c984a0a8dd5beca7e75651b1583e5e9866550e9f286238edad14fdb77f97443bd70876c05b1c01154ed1101fd74309bc6811e094cc93ea98be5c6bad8c7429cec00f57903a4382859b778002aec0f45dd5c8a586ffaaf665103488aff943c5853fd0a74af4f92aa90c5a05205c6cbdd9916308966809e89b2682c2345f34dac2e612d2f71922be59e21bf746f2a47266328d24e2bf1d11240badbe1de7657d17eaafecfb799e12e49a3245955060e1cf6d2e26e86387fd6d212b1f5eff4cc56b0a12e8674e48090f7936911a849cc14d8751396d464a646cb1ac89c46a7fb4a53fd724249378654a6002f1d4bd370550c7f753b46952536c07af223d77e287a1249bc33e8fc1104dd3dcdd5922fbbb8926ca9aaafc0abd83e271aa4e88a66c354b1eb4c41bc7f75a45c591f2cd3428df7963dd19d5ef94dc0784f3d129e16eb91d5d18ab640e091258a59c51e861494056adbc0e6dd296f0d93a73685a72cafcd4353d1c6bf23caefae7fa96b54243b4a8a31493ce58d96f61ed7a096b175047e44b19cb03364f539fc1e8fdc88397dbb614b186a9e114e4a6ecae2d05b9f87a1c249f76e86ee8f70b94d03d206d94dfa4c9aae65c72a2f1d83a9c192f2753a49ecca80784c1b6245b8f5eda6c0bcf8219bee96df973c4ad35191f7b30d0624f7edef4099511de410119e1d3c5ef2ed78274f88dbdd72032340e489c2f211ede04d74836199356b3ed205392b55b4ddd28c3cfec9332da634d30d78ff373090e6e108954e0826aaa3cd585d14ac45335ea6754cccd48bb78d0f5bd591f91180214eb7bb973eecb9e926c3865e0fa94b9ce567172ea4807c9273ac890af99b702d50746896a5a8a7e572afbdb96b91b2141d2c4657e94dfe9b3e8af7a2df97e2abd2f637fafdf6e1840720d414c64c3c859d4efe65eeddefdaffb6f7571f24267db1db4ebda2c76b06c36ef5cee0a17de32c1bb9f21eed4093b9444c970f5e2c4a05c049fef772baf5bdd5af885ecf0f507975310117d5cdca72dc3ae0f46ceb5a4eca5f290b7dda6c92c50021fb336a4dc93c1b316a645e9eebf27c949330709777f70722bd0bbba6489a398fd00f07bfc3bcfabce170087eefc7f42ef8ac657f0112b0e349c324399ee5b6c2cb4b0806f977dcfaf54ff2c56c699e0410f69831d0e8be83532832b7bd2da7a8014e1e009789fe50bc75ac33db499b048689bb9559194f1340a85db960493eb9c5b22dddd6fa2429427de6cf00179748202ee564006a6e02d65ff25af55eb6cbe46d8f79e9a39496f44ab75ad34532722bb2de115627043f4580027934c5d57e6bb329905872c12ce612d4ffadfaf39dfb906ec037fde17816e9dcee1363b0a1bc4aa9b77c4efd2e8b8e68d9cc5e6b61fe624e5402152664650c0fc9e901b9c31a71284ca56735fd3b5ac8493774965cc082d52d97c1aaa120fad518ebeec5836de02bbc32255cce4ced283f500a2d2c050a58f38a433447d744b6c073dc6eb5eaf1cd016d98f14820949776ca9599c3c8f043f6f63a112e17d95f036489a6fdf6fd6fbf8158c39cf5574c739c46ef9ab9ef2f6c741aeb978628b37e391475f0b8645c47d158e28341e6dc31c7d84875ea56980fe56c482d4fec21b3275d2b448d538d8bd94c36428e8eec01b6caefafdc658fdd30a43ad382ad33dd1e59a4421b774ec3796e56a8bfc1137626becfcf19dce07905c10866d48ef847ae6ab45f2eaea58bed7d55cbc614851b780b0590389ff67baeb349fa256d1270faa07332ae3ae7eba2017b144255e70e80e058d8e740efd927f324d7c4a7608bb82c4377fd3e66014850b3c98e608e8e5c3886d4e29a2a307d7b24544007e2e61400928bfb155bd269bb454b1ca50e289daebd6221d54b1ccccdc2fdc5fa01293bcbb694f7323e0c32116c7b9276774bf6e11e392e6695e6b6887b81a8b0fd940dd6d6bfa9c1aff2286fd7cd088ea6a2462e426d9d1ee35d59823b2c46651f7b177d9a14c1f35c9287c2663d7d41b28d1dc6613b3a25845e7498cf8a6bc046a92f5e73f0fdfb6526662ff5f7482ee10e26b95e2bcbd70ca8dcc88296511d7b73bf6477948147b9b7742aeb4ae4bb5ef85e46b2d48e1412a5f55b802c2bb86f7a7a2fd6eafdc818df1f43493d45ddc8e6b62d139ee48c4c3e12a740c09544cf1bd4565fc38c11d1474be91f0bea99a60e86abc93e076bfe9eff2ac9c9b26b4fa1f20dd9421f8b51a77e7aaab0e3a8e0ae44806190ed49695ee78f20aa572c6ff72a5671d7d44922f08301cafe588d44389ed2287717cc5fd5cdddb38c76678e6339bb648b195923c70c1356c76ed1ef4e9f3a02dbca02b539355cb6af11be4f1a7fb4e32d5e6b1f50f54bca5bc0dddbea11b041630404e953cc98f07e16dc451617c3c45839a9e406b73834c4e1b733e2f01ff82ddf2d67da4152c67b1ffcac1a239caa178f281ede00bf4bc37d2e4f424b08da62ea1a579e24bd573b37056f86558a8a3f281ba0ecf22c9d0fba17ba254569deb34f8da549845a16cbea79bae6405a6f2f163350c5ac684f0082a8bbf5d9a32578a06d8ad609534ff49ae2e055783a0bf7edacf7eb1c55f58fde3787c8acf79d12e11607005bc775d01df618db4fb8b30fcbd5340b5f62a462003e3aefd8822f5918c3224ae3a7d98fa5b919fc64e14925b57dcea72581a741ed04f6eb9bc09047264489a043306796ce50b7044f31c5fdf025d41ef47aa7d35420e7ecc93d170403aa87eb1eb7499056c10717b6c844389542111c64381483f48e283bf735fcf2bfcf909b8e32b9dc75df4c41b8c6dea1ee8f1f8f4a191fcf09c69ff249660a4735738578603ceb92289da966c0e61c9b5547acdf618bfad57de9928c4cb7c6c564ad791484c1b709d000c1e984b85adcaeb5b40c7879515ffacb88e1a09e863b0622dc2d8e2effa01efe1b7b595138a6c05925ff00f49d33b0f8da3e9b2b0e990c0052ec469c8120484db201f782e29bdafaf62643a405bbade6dccf086257979c171347b3a02339a7cf5a0f453846bc6ae90b6d3303b3c3294bc79fa82d205190b41bced1ee4b59ad3da6e8f87403b0d378eb081bede04a3faffffc84b0c2b3475a84bbae1425ffffc31811433b14eb4e269a0bece8b5a11e9af9a5e9de3f5b04f518defa17c58beb83f162f75cc1164be2979caee4f927ad652eeb7cbba2a9a4a4c854ec01c8308e58e11ea72c9369b354c47bc32b98ac700487ba16014921a03f9a7977510911b1c200a950110fff6f49b3314db98698c004e2b1087ce63a091590f65f3ff5705ba7e6ac7d4ab615632501ddecdaf17cce6d41678334b322c017f849bc582fd5391f7e30c8266b37b4acec4419e4ac3b380273f76bd635322880437a805970ef3468cd1c2977916dcbecdcc0b002a1a6e262c533b26bb1e629f5c014c183f84da60aa140dab3250efe889f3823c77e2991340552e09586e4c6da7846d091befe40578a4eb437c08d887c66e31e5376263e3ab3f19472942dae71707eb2c5785a5a37975e873303f5d9d29c3d60a159b38fe16e8c2287a3e75bd583dacd167ac878656a7d1d42b893cf78c3bccf94d41c517545aa5bbe3197133b40e2330cbbee6d771b3e825b3adf64b15bffb28cd5fea0dafef8df4d03cecf00e541630695fc780d459b78e71ed4c928a5db0f7e0efe37fa9a2f128892eb88e99d6219d86c1a1978d4014ea0cf086a6df659d4b72dacbfccaccbe78fecd0e42ec17006d0ed7c3cfaecf7b0c5b3e4e8dd8dbcf4d1b96abbbd496dbbafb2988fa8196befb0a3bfa4fdde1e84ea1171404ff4c1095fb7a94581483c6be94c310e5074e6d4a4e8c6764336fcd5c23161dfbc00bbebd54c6be41d2792b00bcf5ca49cc31983428c1df69849f829da2efe16b9dfa4826689a2a621d73f8ba88594a9f5a06e2cabfb07f036ca66012538765f46dd9ec8ae61b9787761ef2ee0f500ed533471d0f593d4e0698688e570aa7fbdad462ccbe8aed989671d051cc2b73ed47c9055177817c082913cf554a0634fb1669c94255d2e4362a6f9c1561a91c278917d91dcd7af9c571819415ba6f146404c64618db284dd1ea132ea0397c1704704e66eaadec9df6fbf75fddcf78f5b19975f0e2a8d69ae801facf5749600bdf978d3ecfbe9421412a169c7b871c516bd91850645e12c722de6656152370dd2893898b11a3934f0c9c4b11163d62001ddfa958ecb80e021c8ea3ba1d30bf559e1223781155cc481d3b13a500a42789b49815d741c25e86e80bbcbfc63dac158f3d7cea0277ab32fac4761b1f2b1b6831d492dc435aad48c3cf689aafc870afe51d78dae2f86aca21103c51627ee6d7e7c533652c4471bd20e935a1bfa7a9d58f02d2bf8f24343081121c5a43820b7911171b9f0f7702ba7a1f01e5e7df887be2435416aaaa026a6a9cc2416040fae603a3c4e4d25b1f400129cc375008c3d0481802e976e49a1f2553adfb5463d772522a20399fb80dd69b96db7544ae0c65e5bffd9c314bf89e1bbc6ba24dd936bc9e59f54e26a0ae87a0facd17b4f4b5d4eff5bf39fdeb2fb46eb01e7b301223f774080916d6847e6f3bc759099a150a6042f9e6b9b5eb8fd1c1bb5e2eb6786efdd366edf2b53cec7803e1d1ff600bcdb084462ed4d24bfe58d6c5eda50e6754b01a7e898d7ffde23f9b1f584cd9a3fe2c4d3912f02681e704bcf72f35e6d2de9e9bb529279837cf290bf38967622f64b121b406cba945164116a588c83f52978b412cfd1ad5e7be6ea2ae860514cbeb56186b2dfe59cf2781cdd6c571f83b56fe60502d409180c599e1e0bbb52f6fa0f9bb36ead1e43b985d5699925a9e5aa0cfbb1c7adfa801c232b59723ffc77fd7c4ba1b3f81b1112405ffbf5630cf4ae2f78c5f893fe204303eb88b488113f6e55e45b633030ba1aa6409228ed2d2240919d9a64bc815162901ae81eeceb4bc393877c26ee3c4b322755b332726d9130acc09c8fac9529c8677d3bc7aa56816743e9550a5ada1595e2d922a8e5d768c5d39899c968332e51321273d1c02d87f348d53a4099b21034ceecbe6207"]}, 0x1160}, {&(0x7f0000e99000-0xb8)={0xb8, 0x15, 0x422, 0x6, 0x2, "", [@generic="d548fdc542fa89a0b99b92949479b488e07cc0e5cc3654f05db7816c8be070f92812ab92328c9a53020341d2abb4761590707eb413661754a78db4c0be93b00490c4ae6ba2e421e24164788ceeeac172655e8b9468c4b41f238303fd29ddc09f3dc424344c1f17781d2f8e8dbd5aa3f08c3db9e2501953e0047c6c54ad06623e9e46eaacb8adcb8c21edce9020a9b156e1ae1ab9dd569deeba6044121ec9fb2acaf355e555c8d3"]}, 0xb8}, {&(0x7f0000193000)={0x28, 0x38, 0x324, 0x7, 0x1, "", [@typed={0x18, 0x79, @ipv6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}]}, 0x28}], 0x3, &(0x7f000053d000)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x28, 0x1, 0x1, [r4, r5, r6, r7, r8, r9]}, @rights={0x18, 0x1, 0x1, [r10, r11]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0xa0, 0x10}, 0x40000) r18 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r10, 0x8040ae69, &(0x7f0000ae5000)={0x8, 0x5, 0x5, 0x6, 0x166a}) ioctl$BINDER_WRITE_READ(r18, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = semget$private(0x0, 0x3, 0x4) semop(r1, &(0x7f0000018000-0x6)=[{0x0, 0xc8, 0x1000}], 0x1) r2 = dup3(r0, r0, 0x80000) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f000055c000)=0x200, 0x4) 2018/01/25 21:01:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00009ea000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000c34000)=0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80221) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000a1b000)={0x0, 0x101}, &(0x7f000083b000)=0x8) write(r3, &(0x7f0000f0d000)="c3ef0c0200000ff5a9a69fd0f134d4de24865baaed34e60ad59d7d2b47f8a3bb5d846275df7d2e4be9fe03844434dcc2af281671553d31cbacf7cdaf2c85ad5c135f79f0237710f8ced989d38a7dc42e33c0ac35e64d1d9abad516a4a522e9500bf9debffc0078e6d13a92a6f3a4d0e5cc044023c96914e07f441933f52448951d5e5451d2bc7223d51ea3a9f84cd0ff5549b97a880673ec325b5e5b1f75136ce7de83500c49f3ff63e9c16e2f42ba581b0e7f789fbb29040000000000000014c223ed3772e764f760b792427aff99e1", 0xd0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00006fe000-0x98)={r4, @in6={{0xa, 0x0, 0xf1, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x84, 0x2}, 0x98) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:39 executing program 0 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 112.870156] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870198] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870317] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870368] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870492] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870527] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870660] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870726] binder: release 17397:17406 transaction 461 out, still active [ 112.870730] binder: undelivered TRANSACTION_COMPLETE [ 112.870738] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.870755] binder: send failed reply for transaction 461, target dead [ 112.870808] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870818] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.870879] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.870940] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.871089] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.871138] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.871234] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.871351] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.871469] binder: release 17292:17304 transaction 434 out, still active [ 112.871473] binder: undelivered TRANSACTION_COMPLETE [ 112.871492] binder: send failed reply for transaction 434, target dead [ 113.626673] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.632249] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.645653] binder: 17779:17782 BC_ACQUIRE_DONE node 589 has no pending acquire request [ 113.653937] binder: 17779:17782 got reply transaction with bad transaction stack, transaction 590 has target 17779:0 [ 113.664736] binder: 17779:17782 transaction failed 29201/-71, size 0-0 line 2718 [ 113.669902] binder: 17778:17788 BC_ACQUIRE_DONE u0000000000000000 no match [ 113.669915] binder: 17778:17788 got reply transaction with bad transaction stack, transaction 592 has target 17779:0 [ 113.669925] binder: 17778:17788 transaction failed 29201/-71, size 0-0 line 2718 [ 113.680916] binder: release 17778:17788 transaction 592 out, still active [ 113.680922] binder: undelivered TRANSACTION_COMPLETE [ 113.680941] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.682467] binder: BINDER_SET_CONTEXT_MGR already set [ 113.682476] binder: 17784:17791 ioctl 40046207 0 returned -16 [ 113.685485] binder: 17784:17791 BC_ACQUIRE_DONE u0000000000000000 no match [ 113.685499] binder: 17784:17791 got reply transaction with bad transaction stack, transaction 594 has target 17779:0 [ 113.685510] binder: 17784:17791 transaction failed 29201/-71, size 0-0 line 2718 [ 113.701786] binder_alloc: binder_alloc_mmap_handler: 17784 20000000-20002000 already mapped failed -16 [ 113.704110] binder: BINDER_SET_CONTEXT_MGR already set [ 113.704121] binder: 17784:17791 ioctl 40046207 0 returned -16 [ 113.705254] binder: release 17785:17794 transaction 596 out, still active [ 113.705259] binder: undelivered TRANSACTION_COMPLETE [ 113.706942] binder: 17784:17791 BC_ACQUIRE_DONE u0000000000000000 no match [ 113.706952] binder: 17784:17791 got reply transaction with no transaction stack [ 113.706960] binder: 17784:17791 transaction failed 29201/-71, size 0-0 line 2703 [ 113.714736] audit: type=1400 audit(1516914099.760:703): avc: denied { ipc_owner } for pid=17786 comm="syz-executor5" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 113.717849] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.717864] binder: release 17784:17799 transaction 597 out, still active [ 113.717868] binder: undelivered TRANSACTION_COMPLETE [ 113.718065] binder: release 17784:17791 transaction 594 out, still active [ 113.718071] binder: undelivered TRANSACTION_COMPLETE [ 113.718079] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.729509] FAULT_INJECTION: forcing a failure. [ 113.729509] name failslab, interval 1, probability 0, space 0, times 0 [ 113.729521] CPU: 1 PID: 17805 Comm: syz-executor0 Not tainted 4.15.0-rc9+ #280 [ 113.729527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.729531] Call Trace: [ 113.729549] dump_stack+0x194/0x257 [ 113.729574] ? arch_local_irq_restore+0x53/0x53 [ 113.729629] should_fail+0x8c0/0xa40 [ 113.729654] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 113.729670] ? perf_trace_run_bpf_submit+0x206/0x330 [ 113.729686] ? check_noncircular+0x20/0x20 [ 113.729710] ? perf_tp_event+0xae0/0xae0 [ 113.729745] ? find_held_lock+0x35/0x1d0 [ 113.729829] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 113.729839] ? lock_downgrade+0x980/0x980 [ 113.729861] ? rcu_note_context_switch+0x710/0x710 [ 113.729873] ? lock_release+0xa40/0xa40 [ 113.729882] ? perf_tp_event+0xae0/0xae0 [ 113.729915] should_failslab+0xec/0x120 [ 113.729932] kmem_cache_alloc_trace+0x4b/0x750 [ 113.729941] ? memset+0x31/0x40 [ 113.729991] binder_get_thread+0x1cf/0x870 [ 113.730024] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 113.730059] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 113.730084] ? rcu_note_context_switch+0x710/0x710 [ 113.730115] ? __might_sleep+0x95/0x190 [ 113.730141] binder_ioctl+0x20c/0x1417 [ 113.730178] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 113.730220] ? avc_ss_reset+0x110/0x110 [ 113.730227] ? lock_downgrade+0x980/0x980 [ 113.730254] ? lock_release+0xa40/0xa40 [ 113.730281] ? __lock_is_held+0xb6/0x140 [ 113.730374] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 113.730388] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 113.730407] ? rcu_note_context_switch+0x710/0x710 [ 113.730444] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 113.730457] do_vfs_ioctl+0x1b1/0x1520 [ 113.730466] ? _cond_resched+0x14/0x30 [ 113.730497] ? ioctl_preallocate+0x2b0/0x2b0 [ 113.730522] ? selinux_capable+0x40/0x40 [ 113.730541] ? __sb_end_write+0xa0/0xd0 [ 113.730571] ? fput+0xd2/0x140 [ 113.730619] ? security_file_ioctl+0x89/0xb0 [ 113.730649] SyS_ioctl+0x8f/0xc0 [ 113.730678] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 113.730687] RIP: 0033:0x452f19 [ 113.730693] RSP: 002b:00007fb4589ecc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 113.730704] RAX: ffffffffffffffda RBX: 00007fb4589ecaa0 RCX: 0000000000452f19 [ 113.730710] RDX: 0000000020008000 RSI: 00000000c0306201 RDI: 0000000000000014 [ 113.730716] RBP: 00007fb4589eca90 R08: 0000000000000000 R09: 0000000000000000 [ 113.730721] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7c96 [ 113.730727] R13: 00007fb4589ecbc8 R14: 00000000004b7c96 R15: 0000000000000000 [ 113.730840] binder: 17803:17805 ioctl c0306201 20008000 returned -12 [ 113.734238] binder: 17787:17795 got reply transaction with no transaction stack [ 113.734246] binder: 17787:17795 transaction failed 29201/-71, size 0-0 line 2703 [ 113.740068] binder: 17797:17800 got transaction with invalid offset (0, min 0 max 0) or object. [ 113.740111] binder: 17797:17800 transaction failed 29201/-22, size 0-8 line 2966 [ 113.743465] binder: release 17786:17789 transaction 599 out, still active [ 113.743472] binder: undelivered TRANSACTION_COMPLETE [ 113.749145] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.794315] binder: 17787:17808 got reply transaction with no transaction stack [ 113.794325] binder: 17787:17808 transaction failed 29201/-71, size 0-0 line 2703 [ 113.811313] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.811686] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.285831] binder: release 17779:17782 transaction 590 out, still active 2018/01/25 21:01:40 executing program 1 (fault-call:7 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000f7f000-0x4)=0x0) r1 = syz_open_dev$vcsa(&(0x7f0000042000)='/dev/vcsa#\x00', 0xffffffffffffff19, 0x8140) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000104000)={0x0, 0x7ff}, &(0x7f0000f4e000)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f000066e000)={r2, 0x100000000}, &(0x7f00004ef000-0x4)=0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000ab000-0x1e)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) 2018/01/25 21:01:40 executing program 0 (fault-call:3 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f9a000)={0x80002004, 0x0}) r3 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f00004f1000-0x1000)=""/4096) 2018/01/25 21:01:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000b72000-0xd)='/dev/dmmidi#\x00', 0x0, 0x401) openat(r1, &(0x7f0000425000-0x8)='./file0\x00', 0x101400, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) sendmsg$netlink(r1, &(0x7f00000e0000)={0x0, 0x0, &(0x7f0000bdf000+0xfc2)=[{&(0x7f00008a7000)={0x260, 0x30, 0x400, 0x4, 0x3, "", [@typed={0xc, 0x14, @u32=0x39}, @generic="9ffef1d3a4867d84d53a27723af1593ccc2fe7095b8362e6f8e27c7d4897682dd914e06b220b0d81e385d284af3d2c41e5a561ca08c3f73cf4b331c7b6e1dab800736777a43cc9b7b1d0b060b96cfd65fbe0644a3520060885a03ff86387ecd9554227ffbd776dc1402d529bfbec48062224069cc384d39a6c01406b226ace6e0de27bbf32cbe40c13270eb6dfd8b1", @typed={0xc, 0x94, @ipv4=@rand_addr=0xffffffffffffffdc}, @nested={0xc0, 0x76, [@generic="55fa441bf9b861daa6bac7827832dad9adff5b9a4910346e926d9879686f2ec522d0030f4644920be667eccbd351cc14e0f03d42960e20586516b9cd3fb45aaa32cc4bfcdd08fd5c1e630321cb09a79a1fc399ecd882c523d69a36d4bf17f0d1bfcc329c19bc37d849b14303b0820389bb8ccc280950b8198a26c7956e810d6e7f45b92cf959b637a98442198dd45a2c4adcb0f3e4b37c4b4f1af45de8afacccff3d233e9834ee93582e8d09178096e4d16cafe073c3ea7d71dbba"]}, @typed={0x18, 0x81, @ipv6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}, @nested={0xd0, 0x45, [@generic="91e8e190b06bc03eb2907f5eb98726efb940173fd243b40cd57368254cf52b684d2d80ea029ef05b4a2aff69dedb0b9ef7bdcae065de5ba246d0bffe321f22d97f961df93bfaa001b1a14e3caf21c7ccaeb22e0e5b6513a0f7009c03402ac1ab67da35bdc0fe89b6baed1e47c4d16d7f23150e9e3a169836a347871a5b3935706f656ffe4e7311811239d2dac451106444d5ee1e524b062582e518c71024f20ba7ef71d64a10bc550e420f6fb04aa4b92cefc278c89caacebc8f2934b6c9c7f62f9ef4", @generic="68d6c3e37942"]}]}, 0x260}], 0x1, 0x0, 0x0, 0x348365e09e0cf99}, 0x81) 2018/01/25 21:01:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:40 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40840, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000b6d000-0x4)=0x2, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000844000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000fe9000-0x2)=0x800) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00004f2000-0x71)=""/113) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00005b5000)=0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000223000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x81, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000fec000)=[@ptr={0x73622a85, 0x8000000000000, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x57, 0x0, &(0x7f0000e73000)="479e38a93476b2ab65d61625cf9c54c3e6b14740e2351bf4beff0f000000000000134cc1ceda42f784b3711e7add56253167ffc4f9257b6f5b94277a9546076227e3a22d2f6fed4e4b1242aa38a7befbe60a2bedaeefa1"}) fcntl$setpipe(r1, 0x407, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00001dd000-0xe8)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @empty=0x0}, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000304000-0x4)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000d52000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}, 0x3, r4}) 2018/01/25 21:01:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 114.292860] binder: undelivered TRANSACTION_COMPLETE [ 114.298081] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.303640] binder: send failed reply for transaction 590, target dead [ 114.310330] binder: send failed reply for transaction 592, target dead [ 114.317041] binder: send failed reply for transaction 594, target dead [ 114.323731] binder: send failed reply for transaction 596, target dead [ 114.330413] binder: send failed reply for transaction 597, target dead [ 114.337103] binder: send failed reply for transaction 599, target dead 2018/01/25 21:01:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 114.364342] binder: 17814:17818 got reply transaction with no transaction stack 2018/01/25 21:01:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 114.375271] binder: 17815:17821 transaction failed 29189/-22, size 0-8 line 2788 [ 114.380768] binder: 17817:17822 ERROR: BC_REGISTER_LOOPER called without request [ 114.380939] binder: 17809:17824 transaction failed 29189/-22, size 0-8 line 2788 [ 114.382964] FAULT_INJECTION: forcing a failure. [ 114.382964] name failslab, interval 1, probability 0, space 0, times 0 [ 114.382974] CPU: 1 PID: 17822 Comm: syz-executor1 Not tainted 4.15.0-rc9+ #280 [ 114.382979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.382982] Call Trace: [ 114.382999] dump_stack+0x194/0x257 [ 114.383022] ? arch_local_irq_restore+0x53/0x53 [ 114.383056] should_fail+0x8c0/0xa40 [ 114.383073] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 114.383090] ? check_noncircular+0x20/0x20 [ 114.383109] ? avc_has_perm_noaudit+0x520/0x520 [ 114.383131] ? find_held_lock+0x35/0x1d0 [ 114.383183] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 114.383190] ? lock_downgrade+0x980/0x980 [ 114.383205] ? rcu_note_context_switch+0x710/0x710 [ 114.383213] ? lock_release+0xa40/0xa40 [ 114.383220] ? selinux_task_to_inode+0x470/0x470 [ 114.383244] should_failslab+0xec/0x120 [ 114.383256] kmem_cache_alloc_trace+0x4b/0x750 [ 114.383292] binder_transaction+0x13ee/0x8200 [ 114.383301] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 114.383310] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 114.383324] ? perf_trace_lock+0xd6/0x900 [ 114.383348] ? trace_event_raw_event_lock+0x340/0x340 [ 114.383355] ? __lock_acquire+0x664/0x3e00 [ 114.383373] ? check_noncircular+0x20/0x20 [ 114.383396] ? binder_transaction_buffer_release+0xbc0/0xbc0 [ 114.383412] ? print_irqtrace_events+0x270/0x270 [ 114.383423] ? trace_event_raw_event_lock+0x340/0x340 [ 114.383430] ? __lock_acquire+0x664/0x3e00 [ 114.383444] ? perf_trace_lock+0xd6/0x900 [ 114.383453] ? check_noncircular+0x20/0x20 [ 114.383477] ? __lock_acquire+0x664/0x3e00 [ 114.383495] ? __lock_acquire+0x664/0x3e00 [ 114.383511] ? __lock_acquire+0x664/0x3e00 [ 114.383534] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 114.383550] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 114.383557] ? lock_acquire+0x1d5/0x580 [ 114.383581] ? __lock_acquire+0x664/0x3e00 [ 114.383589] ? find_held_lock+0x35/0x1d0 [ 114.383624] ? perf_trace_lock+0xd6/0x900 [ 114.383650] ? trace_event_raw_event_lock+0x340/0x340 [ 114.383670] ? check_noncircular+0x20/0x20 [ 114.383683] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 114.383695] ? check_noncircular+0x20/0x20 [ 114.383710] ? __unlock_page_memcg+0x72/0x100 [ 114.383721] ? unlock_page_memcg+0x2c/0x40 [ 114.383734] ? lock_pin_lock+0x360/0x360 [ 114.383744] ? page_add_new_anon_rmap+0x750/0x750 [ 114.383762] ? find_held_lock+0x35/0x1d0 [ 114.383787] ? __might_fault+0x110/0x1d0 [ 114.383799] ? lock_downgrade+0x980/0x980 [ 114.383816] ? lock_release+0xa40/0xa40 [ 114.383825] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 114.383839] ? lock_release+0xa40/0xa40 [ 114.383848] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 114.383866] ? __might_sleep+0x95/0x190 [ 114.383890] ? kasan_check_write+0x14/0x20 [ 114.383909] binder_thread_write+0xc57/0x3820 [ 114.383947] ? binder_transaction+0x8200/0x8200 [ 114.383954] ? __lock_acquire+0x664/0x3e00 [ 114.383963] ? wake_up_page_bit+0x530/0x530 [ 114.383978] ? __lock_is_held+0xb6/0x140 [ 114.384002] ? perf_trace_lock+0xd6/0x900 [ 114.384013] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 114.384025] ? filemap_map_pages+0x942/0x15d0 [ 114.384040] ? trace_event_raw_event_lock+0x340/0x340 [ 114.384058] ? check_noncircular+0x20/0x20 [ 114.384086] ? __lock_acquire+0x664/0x3e00 [ 114.384098] ? perf_trace_lock+0xd6/0x900 [ 114.384129] ? find_held_lock+0x35/0x1d0 [ 114.384153] ? __might_fault+0x110/0x1d0 [ 114.384165] ? lock_downgrade+0x980/0x980 [ 114.384182] ? lock_release+0xa40/0xa40 [ 114.384191] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 114.384221] ? __might_sleep+0x95/0x190 [ 114.384244] ? kasan_check_write+0x14/0x20 [ 114.384266] binder_ioctl_write_read.isra.38+0x261/0xcb0 [ 114.384284] ? binder_thread_write+0x3820/0x3820 [ 114.384335] ? _raw_spin_unlock+0x22/0x30 [ 114.384347] ? _binder_inner_proc_unlock+0x2c/0x50 [ 114.384360] ? binder_get_thread+0x320/0x870 [ 114.384378] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 114.384398] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 114.384429] ? __might_sleep+0x95/0x190 [ 114.384447] binder_ioctl+0xb72/0x1417 [ 114.384470] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 114.384494] ? avc_ss_reset+0x110/0x110 [ 114.384501] ? lock_downgrade+0x980/0x980 [ 114.384516] ? lock_release+0xa40/0xa40 [ 114.384532] ? __lock_is_held+0xb6/0x140 [ 114.384587] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 114.384597] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 114.384609] ? rcu_note_context_switch+0x710/0x710 [ 114.384630] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 114.384640] do_vfs_ioctl+0x1b1/0x1520 [ 114.384648] ? _cond_resched+0x14/0x30 [ 114.384666] ? ioctl_preallocate+0x2b0/0x2b0 [ 114.384682] ? selinux_capable+0x40/0x40 [ 114.384696] ? __sb_end_write+0xa0/0xd0 [ 114.384715] ? fput+0xd2/0x140 [ 114.384738] ? security_file_ioctl+0x89/0xb0 [ 114.384754] SyS_ioctl+0x8f/0xc0 [ 114.384770] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 114.384778] RIP: 0033:0x452f19 [ 114.384782] RSP: 002b:00007fa97de4ac58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 114.384791] RAX: ffffffffffffffda RBX: 00007fa97de4aaa0 RCX: 0000000000452f19 [ 114.384796] RDX: 00000000209effd0 RSI: 00000000c0306201 RDI: 0000000000000013 [ 114.384800] RBP: 00007fa97de4aa90 R08: 0000000000000000 R09: 0000000000000000 [ 114.384804] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7c96 [ 114.384808] R13: 00007fa97de4abc8 R14: 00000000004b7c96 R15: 0000000000000000 [ 114.384931] binder: 17817:17822 transaction failed 29201/-12, size 24-0 line 2844 [ 114.392067] binder: 17813:17820 BC_ACQUIRE_DONE node 608 has no pending acquire request [ 114.392086] binder: 17813:17820 got reply transaction with bad transaction stack, transaction 609 has target 17813:0 [ 114.392098] binder: 17813:17820 transaction failed 29201/-71, size 0-0 line 2718 [ 114.404964] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.405992] binder: 17810:17825 transaction failed 29189/-22, size 0-0 line 2788 [ 114.406635] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.427814] binder_alloc: 17813: binder_alloc_buf, no vma [ 114.427896] binder: 17831:17833 transaction failed 29189/-3, size 0-8 line 2903 [ 114.435744] binder_alloc: 17813: binder_alloc_buf, no vma [ 114.435773] binder: 17832:17836 transaction failed 29189/-3, size 0-8 line 2903 [ 114.443819] binder: 17814:17834 got reply transaction with no transaction stack [ 114.443829] binder: 17814:17834 transaction failed 29201/-71, size 0-0 line 2703 [ 114.445367] binder: BINDER_SET_CONTEXT_MGR already set [ 114.445377] binder: 17813:17830 ioctl 40046207 0 returned -16 [ 114.445856] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.448990] binder_alloc: 17813: binder_alloc_buf, no vma [ 114.449059] binder: 17813:17820 transaction failed 29189/-3, size 40-0 line 2903 [ 114.449888] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.451105] binder: 17813:17820 BC_ACQUIRE_DONE u0000000000000000 no match [ 114.451116] binder: 17813:17820 got reply transaction with no transaction stack [ 114.451124] binder: 17813:17820 transaction failed 29201/-71, size 0-0 line 2703 [ 114.458382] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.458943] binder: release 17813:17820 transaction 609 out, still active [ 114.458949] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.458968] binder: send failed reply for transaction 609, target dead 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 1 (fault-call:7 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000d87000)={0x2, r0, 0x1}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00001f8000)=0x1a, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000ef7000-0x18)={0x40, 0x4, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000955000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000d8e000-0x8)='./file0\x00', 0x80042, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000448000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000834000)=0xe8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000f0d000-0x10)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [0x0, 0x0]}, 0x10) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000663000)=0x2) r2 = syz_open_dev$binder(&(0x7f0000be0000)='/dev/binder#\x00', 0x0, 0x2) stat(&(0x7f0000548000)='./file0\x00', &(0x7f00008ca000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00008cf000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) epoll_wait(r0, &(0x7f0000daf000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x5, 0x3) 2018/01/25 21:01:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f10000-0x11)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f000070c000-0xf1)=""/241) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00004ff000)=0x1) [ 114.487407] binder: 17810:17816 transaction failed 29189/-22, size 0-0 line 2788 [ 115.160806] binder: 17814:17818 transaction failed 29201/-71, size 0-0 line 2703 [ 115.165954] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.166099] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.183398] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 115.206384] binder: 17847:17851 ioctl 81a0ae8c 20954e60 returned -22 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) pipe(&(0x7f00002b5000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000c7a000)=0x6) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000502000)={0x0, 0x6, 0x4, 0x2000000000080, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x80000000, 0x20000000000004, 0x8, 0x3, "32693cbba524d5970b8a74a774bb4f7a", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000e03000)=0x3, 0x4) getsockname$inet(r2, &(0x7f00004ff000-0x10)={0x0, 0xffffffffffffffff, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00006bc000-0x4)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 1 (fault-call:7 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:41 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00003e0000-0x12)='/dev/snd/pcmC#D#c\x00', 0x1da1, 0x400a02) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000c42000)={0x1}, 0x4) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0xfffffffffffffffc) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0xfffffffffffffffe, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 6: syz_open_dev$mouse(&(0x7f0000975000)='/dev/input/mouse#\x00', 0x7, 0x202400) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00008c0000-0xa)='/dev/vcs#\x00', 0x8, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000805000)={0x1000000001, 0xffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000090000-0x58)={{0x4, 0x9}, 0x1, 0x6, 0x2, {0x6, 0x5}, 0x38a, 0x1ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 115.207125] binder: 17839:17844 transaction failed 29189/-22, size 0-8 line 2788 2018/01/25 21:01:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000258000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00007c4000-0xd)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f000039e000)={{0xa, 0x0, 0x100, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x10000}, {0xa, 0x2, 0x5, @loopback={0x0, 0x1}, 0x2}, 0x7ff, [0x5, 0x8, 0xff, 0x1d0e, 0x800, 0x8754, 0x5, 0x7]}, 0x5c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000a79000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f00005a4000)=[@ptr={0x70742a85, 0x0, &(0x7f0000857000-0x1)=0x0, 0x1, 0x0, 0x29}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000e87000)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000576000)=0x1) 2018/01/25 21:01:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) socketpair$inet(0x2, 0x0, 0xffffffffffffffa2, &(0x7f0000c71000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000440000)={0x0, 0x3d, "e7292ded9de714debace84c0abaf4491538f09d0220092349f7567075f17f74a02cc6ae7d6146013a5a41b5e3c64c8dc86c8879692d500f6c06b1cd655"}, &(0x7f00000ca000)=0x45) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000d46000)={0xfffffffffffffffe, {0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x44, 0x40, 0x80, 0x800, 0xbccb, &(0x7f00005e3000)=@generic="8b71eef9b8a7a7fbcd0cdc050bcd0109", 0x3, 0x2, 0x2c}) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f000092d000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f00000c5000)={0x3, 0x9}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000345000)=@sack_info={0x0, 0x5, 0x5}, &(0x7f00003f7000-0x4)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000a54000-0xa0)={0x0, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x6, 0xd09, 0x1, 0x21}, &(0x7f000055a000)=0xa0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000300000-0xc)=@sack_info={0x0, 0x79a, 0x7fff}, &(0x7f0000258000)=0xc) sendmmsg$inet_sctp(r4, &(0x7f0000da5000-0x38)=[{&(0x7f0000bba000)=@in6={0xa, 0x1, 0x100000000, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @rand_addr=0x101}, 0x2}, 0x1c, &(0x7f0000383000)=[{&(0x7f00007e6000-0x8e)="0647620399e0f0922e4329b4e81aad8a87e80ae0feedab4ae45a18837660db4bef955c12b8b2542a574e0e1097be4129ffdbd55785c7c7480af7f4171d76d6a48b489e63b9edb7f0e26f0d1baabff02e1dfe353427e9389bcd9d1713a98f091396a21af7f64f4c69b87842c4113a546f02a24db40460c8ced3d173512bf28a00dee70d0164a7ad3e610bf8930e9b", 0x8e}, {&(0x7f00001c5000-0x35)="b14d0865f543f6d28d800e37c9fc69993da377fa4fdc00238afef0ce74401f51e357b1d7fb69edf79a5860eab749ca8bb3f0e2c1e1", 0x35}, {&(0x7f00000ad000-0x1000)="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", 0x1000}, {&(0x7f00005c9000)="7603126314b182f4", 0x8}, {&(0x7f0000c88000)="26804ff63e2eea17e30db687b95ffba471e799d36ee71368cc37f04d3fd41ead21a422af2e2210d10d117bb954507d8972b3e81a66fc0b66256528e77705cd2172e55f9a9dc7d8678912db3058c889d9eb39345bf329a7a13ab53ce2f661bd5e311a8dd1697e925a583e2203303b1145ef0882c1309c70e4e8886d0b391c4177fff1247e31b6447e5e0b66ec63b020d46df466f204066067b8869e90cb4c7efa35ab3a55af2191c8b494d9ad9ac1e6aa68269604d73ddfd1d38da7e27663335c46acd41e7eda79b128ba3cd97b183eb1bce08af7447a168936", 0xd9}, {&(0x7f0000710000-0xa1)="2145a58848cbf9edd6c980234def93dd5958b92bceffec1482e0fb19047399b26612ddf87c4224350d2760b1dc38e69df2e3145f6a84246e30854b05d09bbae3d8af0f75a85d795ae7bba9528c375de6d93def7b1d4a065f244d6d5f6e6e12e5e143bc8b3c5d40a5e7e5ad59f11c14282089ad48aaedb1c9755cef0da5bce231f221c184dc22974ebcf99782aa3312ee258bb17772cdb71ecf36caafe9d8a21bfd", 0xa1}, {&(0x7f0000eff000)="5b20aeb7f9a594830e8d13c661aee25348acade93ea60247cbd292f65ad546bd7c4a79c0595e48e83af7ebc45f938e657073bb79e1779f0e613144a7af8cd30737ddb4791ef4d15b6f14ed9550520a6730e586eca3a51f022b253f388262", 0x5e}, {&(0x7f000080e000-0xc4)="633c9e9b571a2b676a4e6c3dab9c1447ac1aecd5ac2b97cf2a6644997675a9494dead9eb4008f66e58712c241f5289399608c68e22e4c69ae9c5f4192da8bf001487018a1fe2e538653f0842561cd55d0db3cb61d87c6a01868456e9dbcde719ed5269252c9ece710dc4013f70a3ba9968a2730d9db902470afc3fe81c9be0586aa6955e1bded664095a584a09abb6893087cfe908309c462fd327a1f0c7f0dd4845683d2820a46fcee744b8466ac14614dfe01c9a503000f825fb4caa2cb035c0c46fff", 0xc4}], 0x8, &(0x7f00006a7000)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x6, 0x401, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x0, 0x6, 0xff, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8200, 0x22b, 0x10000, r9}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x50000, 0x0, 0x6, 0x6, 0x5, 0x9, 0x0, r10}}], 0xc0, 0x40000}], 0x1, 0x40000) r11 = openat(0xffffffffffffff9c, &(0x7f0000554000-0x8)='./file0\x00', 0x4000, 0x0) readlinkat(r11, &(0x7f0000bfe000-0x8)='./file0\x00', &(0x7f0000607000)=""/37, 0x25) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 115.207612] binder: 17847:17851 transaction failed 29189/-22, size 0-8 line 2788 [ 115.212176] binder: 17841:17848 ERROR: BC_REGISTER_LOOPER called without request [ 115.216162] FAULT_INJECTION: forcing a failure. [ 115.216162] name failslab, interval 1, probability 0, space 0, times 0 2018/01/25 21:01:41 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000001000-0x8)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000a33000-0x9)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000411000)={0x0, 0x3b, "d975fe3d982528ebd20584dd0a377565e2e3c6399ae671a611852c2a26ea597a3f1128721b69c9e6ab0b694862601fc0fec86a05c5480e7df93c43"}, &(0x7f0000222000)=0x43) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f000007d000-0x14)={r1, 0x1, 0x73ad, 0x2, 0x1ff, 0x9}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000042d000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 2018/01/25 21:01:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x43}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000458000)='net/arp\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000e0a000)=0x0, &(0x7f00007af000)=0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x14, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000135000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000194000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f000084d000)={0x0, 0x0}) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = gettid() perf_event_open(&(0x7f0000d0c000)={0x2, 0x78, 0x3f, 0x5, 0x2, 0x4, 0x0, 0xfff, 0x4000, 0x7, 0x8, 0x6, 0x7cf, 0x10001, 0x6000000, 0x8, 0xfffffffffffff000, 0x10001, 0x8, 0x1, 0xfffffffffffffff7, 0x6, 0x8, 0x1, 0x80000000, 0x0, 0x7, 0x8, 0x80000000, 0x7f, 0x46a, 0x3, 0x3f, 0xfffffffffffffffd, 0x8, 0x80000000, 0x7, 0x8, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00009e8000-0x1)=0x0, 0x3}, 0x1, 0x0, 0x7fff, 0x7, 0x7a4, 0xffffffffffffffff, 0xfffffffffffffffb, 0x0}, r4, 0xff, r0, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00003b6000)={0x1, 0x0}) 2018/01/25 21:01:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00005c0000-0x4)=0x0) 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x14, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00002a4000-0xd0)=""/208) socket$pptp(0x18, 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syncfs(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 4: socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00008cd000-0xb)='net/packet\x00') setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = getuid() stat(&(0x7f00007ec000-0x8)='./file0\x00', &(0x7f0000c3a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00001f7000-0xc)={0x0, 0x0, 0x0}, &(0x7f000027d000-0x4)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000f66000-0xc)={0x0, 0x0, 0x0}, &(0x7f000064e000-0x4)=0xc) sendmsg$nl_netfilter(r1, &(0x7f000004d000-0x38)={&(0x7f0000490000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000955000-0x10)={&(0x7f00006bd000-0x1790)={0x1790, 0x10, 0xb, 0x800, 0x0, 0x2, {0x1, 0x0, 0x2}, [@typed={0xc, 0x73, @uid=r2}, @nested={0x4fc, 0x96, [@generic="75c1c11c54c11cbe2c123e65faa04e4f5eeebb159d56345131e86c1c27de8eceb801ecc9fc60b9513c3bdb642450aff8b440a37e20449c26f50fd3c5ab0d53062772f488529971b88755d372bf50f2997f41f3b6e5da901f4d3c634d0adf6a5661c0a62992cde9a654b68eee07b5f49e2fa8b049282efa9ed0465579515b22185b12cb8a16815fc993aa2feefefb528160e2fd6d9a07f459e06375ea670b808b2c18c175560c3716f82279", @typed={0xc, 0x32, @uid=r3}, @typed={0x108, 0x90, @binary="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"}, @typed={0xc, 0x86, @str="ac00"}, @typed={0xc, 0x2a, @fd=r0}, @generic="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", @generic="f9283857b6e38571f83573fdf6610b921c899415723097ef37d196fc52cd64d385bdcc66bea67e827f4393917e75043bb2da34a8c55585709d8c8a15433e060d35630c2063d79f4284823b7ba1447353da643ab7395f046906799cf34d7fe594cb619a0f863bdc55f38d2174f22fa2be91477390d945eb7cab000336eb234fd3c3cee0f26e3e22da66", @generic="8ae7762cba3c4b25689fbfb78ca921db5acc3e7068ede4da2e57bc82bccef6e601464365d2a541a9512dcf83b768a760df2e81a39223cb5d0402e40f51eab77a85af45a7bce15e826894350b55e2d23a3dcc914ad1a1d9b00d5cd474ced3daea078d241b5cefaa948051e945d36901a0102a4aa61c5147ff25d0bf4e80cb94debfefc0db86b929caf8f0332f90638596", @generic="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", @typed={0xc, 0x5e, @u32=0x7}]}, @nested={0x28, 0x79, [@typed={0xc, 0xa, @u32=0x2}, @typed={0x18, 0x35, @str='/dev/binder#\x00'}]}, @nested={0x124c, 0x26, [@typed={0xc, 0x5, @u32=0x0}, @typed={0xc, 0x92, @uid=r4}, @generic="4247fef7636ecc429ad8825af51f655bbfdbe8a633504d4690e26ae011817a8be50e5515d779abf3abbe9e264675c0a501177b82a9d7f3a49fa355d1d2418b4601e8c8c5e54334506c6eefa02c2d4cdab26e897ff382f04e6ebce635b0f8984e675085405866f6", @typed={0x10, 0x1f, @u64=0x1000000000}, @generic="bf886d599d6511d8523149e1d4ec7e3e350820da45ddf4a7fd9458e7b81ae4ebcc5e92806ae511e1cbdb393f6acc2a5e2846d475777e1186fb2570ef554d4c8f7a7bb4f9b84d70d21cf35eaf084eee832b682dca05d39bc9d045aaa130c2cbc124bd2ac65b96d2c59f52835488d28b682167df536c53e2d2b15c9a0894ac9600d85753ea0a9b8238b2acc28414d1637275acee7afd2632291f0b0c7333858dce24b72c7ba859dbf4e9d0bbcb0315f4721736", @typed={0xf8, 0x3b, @binary="003b89674084dea0b5e8bb671fe51fc9caf3bb01530165bab81c23a25af891bb49b1027c8a36cf8c968e33049e5642ac03d99c9c222141ac5da8d8bedabedbfc0cf4b0c3952512e8786262256e7531b66d0ff2194ed809812956def7bf7c191b923cf7569dce58b23dc993f4e0d06fa275268a1f6a6981d9bedae9fcf2fd1314210eaa491abc4cd947c568fa7a1a28f9cd7c5c974ec2a9bb1ab784e55ca0434e52d8de87074329cf42897c21f3f9c3cb4fa344ff8553ab33792e77a8c1059b4fd402a8520f107bce05d31f9d83824d61a8753b2d8c09dd8b8fd48ff516a852371feec87c435df5d7c395f22922"}, @typed={0xc, 0x63, @pid=r5}, @generic="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"]}]}, 0x1790}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) socketpair$inet(0x2, 0x6, 0x9, &(0x7f0000bcc000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00004b2000-0x4)=0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00007b5000-0x8)='./file0\x00', 0x40000, 0x110) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f000056c000-0x12)='/dev/snd/pcmC#D#p\x00', 0xfa8b, 0x40400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00005e8000-0x4)=0x5, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$midi(&(0x7f0000cdc000)='/dev/midi#\x00', 0x80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$TIOCSTI(r3, 0x5412, 0xfffffffffffffffb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setendian(0x14, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat(r2, &(0x7f0000836000-0x8)='./file0\x00', 0x80000, 0x118) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000108000)=0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x14, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 115.216171] CPU: 1 PID: 17848 Comm: syz-executor1 Not tainted 4.15.0-rc9+ #280 [ 115.216176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.216180] Call Trace: [ 115.216194] dump_stack+0x194/0x257 [ 115.216211] ? arch_local_irq_restore+0x53/0x53 [ 115.216221] ? __save_stack_trace+0x7e/0xd0 [ 115.216251] should_fail+0x8c0/0xa40 [ 115.216267] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 115.216280] ? kasan_kmalloc+0xad/0xe0 [ 115.216290] ? kmem_cache_alloc_trace+0x136/0x750 [ 115.216302] ? binder_transaction+0x13ee/0x8200 [ 115.216312] ? binder_thread_write+0xc57/0x3820 [ 115.216321] ? binder_ioctl_write_read.isra.38+0x261/0xcb0 [ 115.216327] ? binder_ioctl+0xb72/0x1417 [ 115.216334] ? do_vfs_ioctl+0x1b1/0x1520 [ 115.216343] ? entry_SYSCALL_64_fastpath+0x29/0xa0 [ 115.216355] ? avc_has_perm_noaudit+0x520/0x520 [ 115.216379] ? find_held_lock+0x35/0x1d0 [ 115.216432] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 115.216439] ? lock_downgrade+0x980/0x980 [ 115.216455] ? rcu_note_context_switch+0x710/0x710 [ 115.216480] should_failslab+0xec/0x120 [ 115.216492] kmem_cache_alloc_trace+0x4b/0x750 [ 115.216502] ? __lockdep_init_map+0xe4/0x650 [ 115.216537] binder_transaction+0x1460/0x8200 [ 115.216553] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 115.216565] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 115.216581] ? perf_trace_lock+0xd6/0x900 [ 115.216608] ? trace_event_raw_event_lock+0x340/0x340 [ 115.216618] ? __lock_acquire+0x664/0x3e00 [ 115.216658] ? binder_transaction_buffer_release+0xbc0/0xbc0 [ 115.216676] ? print_irqtrace_events+0x270/0x270 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000553000)='/dev/audio\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000478000-0x8)={0x0, 0xe5}, &(0x7f00000bb000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000787000)={r2, 0x1000, 0x10001}, &(0x7f00000e5000)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000736000-0x8)='./file0\x00', 0x0) inotify_rm_watch(r0, r1) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000244000)='/selinux/enforce\x00', 0x20000, 0x0) fstat(r2, &(0x7f0000959000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000168000)='/dev/snd/midiC#D#\x00', 0x2, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000084f000-0xe8)={{{@in=@empty=0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000d54000)=0xe8) sendmsg$nl_netfilter(r3, &(0x7f00003c7000)={&(0x7f0000ba7000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00004e7000-0x10)={&(0x7f00000fd000)={0x24bc, 0x5, 0xb, 0x0, 0x6, 0x1, {0x1, 0x0, 0x8}, [@typed={0xc, 0x15, @ipv4=@local={0xac, 0x14, 0x0, 0xaa}}, @generic="f70a6138f9686355ab2216a0bd14590578620bf465a0517ba5ca6ab171ed4d8d16fe518308e3bec815bb96865f8242c49446f7e916cdd19fed10d43ddb1a2f7613f6e02171044bb5dd8b015505a16c2edb8d57d9f13adc47c084793feb8906", @nested={0x12c, 0x12, [@typed={0x18, 0x27, @ipv6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17}}, @generic="014f8009a2c19c5859290e99dd09ac8187b5e8e3d513aea35e938dcc4a09306d8f5fe0a783f2c279f5e19041b0da23666f2e3cfe2d98e4edf857fb3c8d7a6280cd6fc54f9071b8b8884c5ed6439bc9c006ab233c10d6cbe7053c72174f7cade9809c61de7c64b70b060b5a66757a406a8d18ace7f08cadeb19e553f06273d58de5aed8c61a46e7f0", @generic="64e662b0712a8bd5d18b3030baed51f18ee56e9734e4e99379540612771e23c1594c1bfb21de67c1825db26a0223ba53785db2c94bd8198d76f28181ec57cd16fc2b3910d9b04e2469e6b1220fe03d9cb45f3c817fe6a95ba6d4d6ada4562734ca1654184f7bcb993af509fdac", @typed={0xc, 0xd, @u32=0x3}, @typed={0xc, 0x5, @ipv4=@rand_addr=0x2}]}, @nested={0xbc, 0x4c, [@typed={0x14, 0x33, @str='vmnet1ppp0\x00'}, @generic="148b0bcd6d4b3cb9070a035d19a30a127b9785618eb8a5ecc0c10101d588e07a0ab269bc7ed52843b6fd994d2ac67f0ef8d795dffd9c74eb2a85be1ef5d5fa945e1caad38247ad4d6aeaa190c33735ea32fda6a1c48e0791709d81bf6776dd690fc2f94c4ec4167bebf324968647cfb64e82f70a7209e872e6daa59f8fd1f1", @typed={0xc, 0x47, @ipv4=@rand_addr=0x100000001}, @typed={0xc, 0xd, @uid=r4}, @typed={0xc, 0x17, @ipv4=@remote={0xac, 0x14, 0x0, 0xbb}}]}, @nested={0x224c, 0x1e, [@generic="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", @typed={0x18, 0x3e, @ipv6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}, @generic="4ef9f7f6481f6260a65e8814cb7fc295ed85ddea60df7daf2050748df3bb916a76c893c120fea8f2aa28a60f7c82b08fa3a85c6d4edc05a258b7d98c7ef1638b89ae64cbde8e64e8ec016554607de9c2b76146eaa2519d9b5bfcc42cfece35315aef8d3562662519341468339b42941c5cde3f683d65688e15ff6aa7e5045c55fd81c1800bfe7845c88dccc5611051a33400020181df4b039d25431932cab136cc8dd7665a7d784a7458c52dc8704cf5fa00eafb361a33cd68c9a14a452ff735dc549b96395f568b1de2a0115f8fd53dff8d06749aeb07b9b597b3e7d26360dfe8fe61dcca825ab9a55b7a442f", @generic="2dd3bf3b476972f4ee6ea17100a3b4a3f2702adc6abe3f3fb8025d3a76ba8f902ac8d908ce0b2a23c017", @generic="1f5fc56987fed25650fe3d3b5ca1d93395458babec73973034761ba128c1a9ec28d9fb58677bfd6fd951d9b61ef5cd220e9681d76cc39c00fb87847a115ea01856c7573055465d22a5b7fbf5ef22ef895708e8966129faa86c47e0e43c71f5a309b223f11192754f8a0ded5074abe79f4234cadc27469fc78264ea3baf52ae25246515ff8049245fa36c2b971cd55f60dc69ddfad029994fb5bfe37e17ba", @typed={0xc, 0xc, @uid=r5}, @typed={0x10, 0x6a, @u64=0x8}, @generic="ac6bbaad27f8ad38d9a593d4358782fb6aab869fbe98f8412692a834a551b8ea160b0e1fb541a70b2d8102c4fbc5d861562db93c13520bf6e9d9b84a7e0c7063a1f85e8575c8f7337996127dec8ddbadff126ad95422fb98ed39286e3c7d", @generic="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"]}, @generic="ca686b3d4bed26"]}, 0x24bc}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) 2018/01/25 21:01:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000f97000-0x9)='/dev/rtc\x00', 0x80000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00003aa000-0x10)='/dev/sequencer2\x00', 0x40, 0x0) r1 = dup2(0xffffffffffffffff, r0) getpeername$ax25(r1, &(0x7f00005e0000)={0x0, {""/7}, 0x0}, &(0x7f0000894000)=0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b55000)={0x0, 0x0}) futex(&(0x7f0000e2b000)=0x9, 0x481766df0861c8c, 0x2, &(0x7f0000d24000-0x10)={0x77359400, 0x0}, &(0x7f00008c7000)=0xb6c2b2b, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000e27000)=[@in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x519, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa}, 0xff}], 0x3c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000f9a000)={0x80002004, 0x0}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b3c000)={0x3, &(0x7f0000ec9000)=[{0x1000, 0x80, 0x45, 0x4c}, {0x9f16, 0x81, 0x1, 0xc8}, {0xc5f5, 0x4, 0x7f, 0x400}]}, 0x10) 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000ef7000-0x18)={0x40, 0x4, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f57000-0xc)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000637000-0x20)={@common='bcsh0\x00', @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) preadv(r0, &(0x7f0000f28000-0x30)=[{&(0x7f00007d8000)=""/182, 0xb6}, {&(0x7f0000353000-0x8d)=""/141, 0x8d}, {&(0x7f00009db000-0x1000)=""/4096, 0x1000}], 0x3, 0x37) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x4000000000) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000e9c000-0x38)={&(0x7f0000770000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000009b000)={&(0x7f0000e0b000-0x27)=@newlink={0x28, 0x10, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x800, 0x0}, [@IFLA_CARRIER={0x8, 0x21, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 115.216688] ? trace_event_raw_event_lock+0x340/0x340 [ 115.216698] ? __lock_acquire+0x664/0x3e00 [ 115.216714] ? perf_trace_lock+0xd6/0x900 [ 115.216722] ? check_noncircular+0x20/0x20 [ 115.216743] ? __lock_acquire+0x664/0x3e00 [ 115.216760] ? __lock_acquire+0x664/0x3e00 [ 115.216775] ? __lock_acquire+0x664/0x3e00 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000ef7000-0x18)={0x40, 0x4, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000731000)=0x0) ptrace(0x4208, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000038f000)={0x44, 0x0, &(0x7f00005e1000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, &(0x7f000026c000)=[], &(0x7f0000cdb000-0x30)=[0x40, 0x18, 0x0, 0x30, 0x78, 0x40]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000971000-0x10)='/selinux/status\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f00002e8000-0x4)=0x0, &(0x7f00001ed000)=0x4) 2018/01/25 21:01:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00005bb000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00007c9000-0x4)=0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00008c5000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffa, 0x100) ioctl$TCSBRK(r2, 0x5409, 0x0) ptrace$setopts(0x4206, r1, 0x5, 0x40) [ 115.216799] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 115.216815] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 115.216822] ? lock_acquire+0x1d5/0x580 [ 115.216841] ? __lock_acquire+0x664/0x3e00 2018/01/25 21:01:41 executing program 5: r0 = semget(0x0, 0x3, 0x29) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000001000-0x4e)=""/78) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000aa6000-0x4)=0x0, &(0x7f000067c000)=0x0, 0x4, &(0x7f0000495000/0x2000)=nil, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) recvfrom$llc(r0, &(0x7f00004bf000)=""/155, 0x9b, 0x2120, &(0x7f00001fd000)={0x1a, 0x8, 0x7, 0x20, 0x401, 0x400, @random="57b037c5f00e", [0x0, 0x0]}, 0x10) [ 115.216850] ? find_held_lock+0x35/0x1d0 [ 115.216883] ? perf_trace_lock+0xd6/0x900 [ 115.216906] ? trace_event_raw_event_lock+0x340/0x340 [ 115.216923] ? check_noncircular+0x20/0x20 2018/01/25 21:01:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000ef7000-0x18)={0x40, 0x4, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sysfs$1(0x1, &(0x7f0000498000)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000620000-0x9)='/dev/rtc\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000cfc000-0x10)={0x0, 0x0}) write$evdev(r2, &(0x7f000035d000)=[{{0x0, 0x2710}, 0x2, 0x5, 0xffff}, {{0x0, 0x0}, 0xffdd, 0x6, 0x9}, {{0x77359400, 0x0}, 0x2, 0x2, 0x20}, {{0x77359400, 0x0}, 0x100, 0x1, 0x59}, {{0x77359400, 0x0}, 0x200, 0x7, 0x2}, {{0x77359400, 0x0}, 0x7fffffff, 0x4, 0xffffffffffffff7f}, {{r3, r4/1000+30000}, 0x10000, 0x7fff, 0x2}], 0xa8) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000dd9000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000525000-0x4)=0xb) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000ec3000)={0x0}, &(0x7f00005a2000)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) r5 = open(&(0x7f0000e89000-0x8)='./file0\x00', 0x228cc0, 0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000dfd000)=0x9, 0x4) 2018/01/25 21:01:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:41 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000737000)='/dev/dsp#\x00', 0x0, 0x10000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000001000-0x4)=0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000bad000)={0x0, 0x0}) pselect6(0x40, &(0x7f000010f000-0x40)={0x8b5, 0xffff, 0x3, 0x40, 0x6, 0x101, 0x6fb, 0x1}, &(0x7f00002de000)={0xffffffffffffffff, 0x3884, 0xc92, 0x1, 0x5, 0x1, 0x1ebe, 0x0}, &(0x7f0000f8e000)={0x6165, 0x5, 0x8, 0x5, 0x0, 0x8, 0x80, 0x89b5}, &(0x7f000088f000-0x10)={r1, r2+30000000}, &(0x7f0000bf6000-0x10)={&(0x7f0000327000)={0x1}, 0x8}) r3 = syz_open_dev$vcsa(&(0x7f0000821000-0xb)='/dev/vcsa#\x00', 0x2, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000d5a000)={0x44, 0x0, &(0x7f00000d6000)=[], 0x37f, 0x0, &(0x7f0000f77000)="fffffffffffffffa4aa86fa956a89d3c2da3e80f7ac1cbd0e2d0f3e0e6eb9f875ea8011277c90c1d8c4631221f3337f7b97ce518b04f91df80053f619d0396959e62c98303c2f900a8b4f591f0e19172a22c760576e388"}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005da000-0xf)='/dev/sequencer\x00', 0x101020, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r4, 0x89e3, &(0x7f0000a6b000-0x2)=0xfb0a) ioctl$KVM_SMI(r3, 0xaeb7) 2018/01/25 21:01:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000046a000-0x10)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000487000-0x20)={0x1, 0x0, [{0x0, 0x90000, 0x1, 0x3, 0x800, 0x0}]}) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000781000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000b97000-0xc)='/dev/rfkill\x00', 0x404180, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000a9a000)={0x0, 0x1000, "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"}, &(0x7f0000541000)=0x1008) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000165000-0x14)={r3, 0xffffffffffffff64, 0x10001, 0x20, 0xff, 0x5}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000b50000)={0x0, 0x0}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000802000-0x8)={0x20, 0xffffffff}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000030000-0x30)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000085a000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000777000-0x10)={0x7fff, 0x3}) [ 115.216936] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 115.216948] ? check_noncircular+0x20/0x20 [ 115.216964] ? __unlock_page_memcg+0x72/0x100 [ 115.216975] ? unlock_page_memcg+0x2c/0x40 [ 115.216988] ? lock_pin_lock+0x360/0x360 [ 115.216999] ? page_add_new_anon_rmap+0x750/0x750 [ 115.217018] ? find_held_lock+0x35/0x1d0 [ 115.217043] ? __might_fault+0x110/0x1d0 [ 115.217054] ? lock_downgrade+0x980/0x980 2018/01/25 21:01:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:42 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f000036c000)='/dev/vcs\x00', 0xa000, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) r4 = add_key(&(0x7f00005c0000-0x8)='trusted\x00', &(0x7f00000c9000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000a22000)={0x0, 0x0, &(0x7f0000e77000-0x10)={&(0x7f0000f80000)={0x2, 0x17, 0x3, 0x7, 0x10, 0x0, 0x6, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0xd, 0x1, {0x6, 0x3c, 0x53, 0x1, 0x0, 0x20, 0x0, @in=@dev={0xac, 0x14, 0x0, 0xc}, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}}, @sadb_sa={0x2, 0x1, 0x3, 0x3ff, 0x0, 0x44, 0x2, 0x80000000}, @sadb_ident={0x2, 0xa, 0x5, 0x0, 0x8000}, @sadb_spirange={0x2, 0x10, 0x2, 0x0, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x0}, 0x40040) keyctl$clear(0x7, r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 115.217071] ? lock_release+0xa40/0xa40 [ 115.217081] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 115.217095] ? lock_release+0xa40/0xa40 2018/01/25 21:01:42 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000ef7000-0x18)={0x40, 0x4, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x981, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = openat(0xffffffffffffffff, &(0x7f00003f6000)='./file0\x00', 0x149040, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000f76000)=0x1ff, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000fe9000)=@assoc_value={0x0, 0x3ff}, &(0x7f0000d3c000)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000fff000-0x98)={r2, @in6={{0xa, 0x1, 0x2, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14}, 0x101}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x20}, &(0x7f00009d5000-0x4)=0x98) 2018/01/25 21:01:42 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) syz_open_dev$dmmidi(&(0x7f00006aa000-0xd)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:42 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x440440, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000cc9000-0x4)=0x0, &(0x7f0000be5000)=0x4) syz_open_dev$dspn(&(0x7f0000a94000)='/dev/dsp#\x00', 0xffffffff, 0x440001) 2018/01/25 21:01:42 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 115.217104] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 115.217122] ? __might_sleep+0x95/0x190 [ 115.217145] ? kasan_check_write+0x14/0x20 2018/01/25 21:01:42 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c25000-0x10)='/dev/sequencer2\x00', 0x60000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00004c1000-0x4)=0x2, &(0x7f0000d90000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 115.217166] binder_thread_write+0xc57/0x3820 [ 115.217204] ? binder_transaction+0x8200/0x8200 [ 115.217212] ? __lock_acquire+0x664/0x3e00 [ 115.217222] ? wake_up_page_bit+0x530/0x530 [ 115.217238] ? __lock_is_held+0xb6/0x140 [ 115.217280] ? perf_trace_lock+0xd6/0x900 [ 115.217291] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 115.217302] ? filemap_map_pages+0x942/0x15d0 [ 115.217315] ? trace_event_raw_event_lock+0x340/0x340 [ 115.217335] ? check_noncircular+0x20/0x20 [ 115.217363] ? __lock_acquire+0x664/0x3e00 [ 115.217375] ? perf_trace_lock+0xd6/0x900 [ 115.217406] ? find_held_lock+0x35/0x1d0 [ 115.217431] ? __might_fault+0x110/0x1d0 [ 115.217445] ? lock_downgrade+0x980/0x980 [ 115.217465] ? lock_release+0xa40/0xa40 [ 115.217474] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 115.217505] ? __might_sleep+0x95/0x190 [ 115.217529] ? kasan_check_write+0x14/0x20 [ 115.217555] binder_ioctl_write_read.isra.38+0x261/0xcb0 [ 115.217577] ? binder_thread_write+0x3820/0x3820 [ 115.217609] ? _raw_spin_unlock+0x22/0x30 [ 115.217621] ? _binder_inner_proc_unlock+0x2c/0x50 [ 115.217635] ? binder_get_thread+0x320/0x870 [ 115.217654] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 115.217674] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 115.217699] ? __might_sleep+0x95/0x190 [ 115.217717] binder_ioctl+0xb72/0x1417 [ 115.217737] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 115.217763] ? avc_ss_reset+0x110/0x110 [ 115.217770] ? lock_downgrade+0x980/0x980 [ 115.217787] ? lock_release+0xa40/0xa40 [ 115.217803] ? __lock_is_held+0xb6/0x140 [ 115.217864] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 115.217873] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 115.217886] ? rcu_note_context_switch+0x710/0x710 [ 115.217911] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 115.217920] do_vfs_ioctl+0x1b1/0x1520 [ 115.217927] ? _cond_resched+0x14/0x30 [ 115.217946] ? ioctl_preallocate+0x2b0/0x2b0 [ 115.217963] ? selinux_capable+0x40/0x40 [ 115.217978] ? __sb_end_write+0xa0/0xd0 [ 115.218000] ? fput+0xd2/0x140 [ 115.218027] ? security_file_ioctl+0x89/0xb0 [ 115.218045] SyS_ioctl+0x8f/0xc0 [ 115.218063] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 115.218070] RIP: 0033:0x452f19 [ 115.218075] RSP: 002b:00007fa97de4ac58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 115.218084] RAX: ffffffffffffffda RBX: 00007fa97de4aaa0 RCX: 0000000000452f19 [ 115.218089] RDX: 00000000209effd0 RSI: 00000000c0306201 RDI: 0000000000000013 [ 115.218093] RBP: 00007fa97de4aa90 R08: 0000000000000000 R09: 0000000000000000 [ 115.218098] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7c96 [ 115.218103] R13: 00007fa97de4abc8 R14: 00000000004b7c96 R15: 0000000000000000 [ 115.218216] binder: 17841:17848 transaction failed 29201/-12, size 24-0 line 2854 [ 115.227713] binder: 17845:17849 BC_ACQUIRE_DONE node 622 has no pending acquire request [ 115.227733] binder: 17845:17849 got reply transaction with bad transaction stack, transaction 623 has target 17845:0 [ 115.227744] binder: 17845:17849 transaction failed 29201/-71, size 0-0 line 2718 [ 115.236128] binder: 17847:17851 ioctl 81a0ae8c 20954e60 returned -22 [ 115.236645] binder: 17847:17851 got transaction with invalid offset (0, min 0 max 0) or object. [ 115.236882] binder: 17847:17851 transaction failed 29201/-22, size 0-8 line 2966 [ 115.237940] binder: 17842:17854 got reply transaction with no transaction stack [ 115.237949] binder: 17842:17854 transaction failed 29201/-71, size 0-0 line 2703 [ 115.240257] QAT: Invalid ioctl [ 115.242549] QAT: Invalid ioctl [ 115.249717] binder: 17850:17853 transaction failed 29189/-22, size 0-0 line 2788 [ 115.266674] QAT: Invalid ioctl [ 115.268526] binder: BINDER_SET_CONTEXT_MGR already set [ 115.268536] binder: 17845:17863 ioctl 40046207 0 returned -16 [ 115.272088] QAT: Invalid ioctl [ 115.275098] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.275132] binder: 17859:17861 transaction failed 29189/-3, size 0-8 line 2903 [ 115.282646] binder: 17850:17853 transaction failed 29189/-22, size 0-0 line 2788 [ 115.283065] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.283098] binder: 17845:17849 transaction failed 29189/-3, size 40-0 line 2903 [ 115.283147] binder: 17845:17862 BC_ACQUIRE_DONE u0000000000000000 no match [ 115.283156] binder: 17845:17862 got reply transaction with no transaction stack [ 115.283165] binder: 17845:17862 transaction failed 29201/-71, size 0-0 line 2703 [ 115.296163] binder: BINDER_SET_CONTEXT_MGR already set [ 115.296174] binder: 17865:17868 ioctl 40046207 0 returned -16 [ 115.296246] binder: 17865:17868 ERROR: BC_REGISTER_LOOPER called without request [ 115.298874] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.298897] binder: 17865:17868 transaction failed 29189/-3, size 24-0 line 2903 [ 115.329098] binder: 17873:17877 transaction failed 29189/-22, size 0-0 line 2788 [ 115.335668] binder: 17870:17875 got reply transaction with no transaction stack [ 115.335678] binder: 17870:17875 transaction failed 29201/-71, size 0-0 line 2703 [ 115.336854] binder: 17870:17875 ioctl c058534f 2008ffa8 returned -22 [ 115.340987] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.341064] binder: 17866:17871 transaction failed 29189/-3, size 0-8 line 2903 [ 115.346557] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.346588] binder: 17876:17879 transaction failed 29189/-3, size 0-8 line 2903 [ 115.361972] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.362008] binder: 17866:17871 transaction failed 29189/-3, size 0-8 line 2903 [ 115.367313] binder: BINDER_SET_CONTEXT_MGR already set [ 115.367321] binder: 17880:17887 ioctl 40046207 0 returned -16 [ 115.367378] binder: 17880:17887 ERROR: BC_REGISTER_LOOPER called without request [ 115.370415] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.370440] binder: 17880:17887 transaction failed 29189/-3, size 24-0 line 2903 [ 115.376277] binder: BINDER_SET_CONTEXT_MGR already set [ 115.376288] binder: 17881:17886 ioctl 40046207 0 returned -16 [ 115.378849] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.378882] binder: 17881:17886 transaction failed 29189/-3, size 40-0 line 2903 [ 115.418316] binder: BINDER_SET_CONTEXT_MGR already set [ 115.418327] binder: 17881:17886 ioctl 40046207 0 returned -16 [ 115.419234] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.419257] binder: 17881:17890 transaction failed 29189/-3, size 40-0 line 2903 [ 115.468670] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.468710] binder: 17896:17904 transaction failed 29189/-3, size 0-8 line 2903 [ 115.471070] binder: BINDER_SET_CONTEXT_MGR already set [ 115.471081] binder: 17898:17906 ioctl 40046207 0 returned -16 [ 115.472233] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.472265] binder: 17898:17906 transaction failed 29189/-3, size 40-0 line 2903 [ 115.478352] binder: 17898:17906 ioctl 800454cf 205bfffc returned -22 [ 115.479271] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.479296] binder: 17897:17902 transaction failed 29189/-3, size 0-0 line 2903 [ 115.484313] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.484335] binder: 17893:17905 transaction failed 29189/-3, size 0-8 line 2903 [ 115.485947] binder: BINDER_SET_CONTEXT_MGR already set [ 115.485956] binder: 17899:17907 ioctl 40046207 0 returned -16 [ 115.486072] binder: 17899:17907 ERROR: BC_REGISTER_LOOPER called without request [ 115.488218] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.488244] binder: 17899:17907 transaction failed 29189/-3, size 24-0 line 2903 [ 115.490620] binder: 17895:17903 got reply transaction with no transaction stack [ 115.490629] binder: 17895:17903 transaction failed 29201/-71, size 0-0 line 2703 [ 115.499852] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.499878] binder: 17897:17902 transaction failed 29189/-3, size 0-0 line 2903 [ 115.510448] binder: BINDER_SET_CONTEXT_MGR already set [ 115.510457] binder: 17898:17911 ioctl 40046207 0 returned -16 [ 115.520850] binder_alloc: binder_alloc_mmap_handler: 17899 20000000-20002000 already mapped failed -16 [ 115.521079] binder: 17898:17911 BC_ACQUIRE_DONE u0000000000000000 no match [ 115.521090] binder: 17898:17911 got reply transaction with no transaction stack [ 115.521098] binder: 17898:17911 transaction failed 29201/-71, size 0-0 line 2703 [ 115.522794] binder: 17895:17903 got reply transaction with no transaction stack [ 115.522804] binder: 17895:17903 transaction failed 29201/-71, size 0-0 line 2703 [ 115.527901] binder: BINDER_SET_CONTEXT_MGR already set [ 115.527911] binder: 17899:17907 ioctl 40046207 0 returned -16 [ 115.527938] binder: 17899:17913 ERROR: BC_REGISTER_LOOPER called without request [ 115.537539] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.537574] binder: 17912:17916 transaction failed 29189/-3, size 0-8 line 2903 [ 115.549378] binder: 17917:17918 ioctl 80044584 202a3f30 returned -22 [ 115.551005] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.551104] binder: 17917:17918 transaction failed 29189/-3, size 0-8 line 2903 [ 115.578273] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.578298] binder: 17920:17927 transaction failed 29189/-3, size 0-0 line 2903 [ 115.580166] binder: 17917:17923 ioctl 80044584 202a3f30 returned -22 [ 115.582575] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.582599] binder: 17917:17923 transaction failed 29189/-3, size 0-8 line 2903 [ 115.584630] binder: BINDER_SET_CONTEXT_MGR already set [ 115.584640] binder: 17921:17924 ioctl 40046207 0 returned -16 [ 115.587650] binder: 17922:17925 got reply transaction with no transaction stack [ 115.587658] binder: 17922:17925 transaction failed 29201/-71, size 0-0 line 2703 [ 115.587696] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.587726] binder: 17921:17924 transaction failed 29189/-3, size 40-0 line 2903 [ 115.592550] binder: 17922:17925 got reply transaction with no transaction stack [ 115.592559] binder: 17922:17925 transaction failed 29201/-71, size 0-0 line 2703 [ 115.597313] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.597347] binder: 17930:17933 transaction failed 29189/-3, size 0-8 line 2903 [ 115.600042] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.600069] binder: 17920:17932 transaction failed 29189/-3, size 0-0 line 2903 [ 115.610845] binder: BINDER_SET_CONTEXT_MGR already set [ 115.610853] binder: 17926:17929 ioctl 40046207 0 returned -16 [ 115.613394] binder: 17926:17929 ERROR: BC_REGISTER_LOOPER called without request [ 115.614406] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.614432] binder: 17926:17929 transaction failed 29189/-3, size 24-0 line 2903 [ 115.628057] binder: 17921:17937 BC_ACQUIRE_DONE u0000000000000000 no match [ 115.628068] binder: 17921:17937 got reply transaction with no transaction stack [ 115.628076] binder: 17921:17937 transaction failed 29201/-71, size 0-0 line 2703 [ 115.628749] binder_alloc: binder_alloc_mmap_handler: 17926 20000000-20002000 already mapped failed -16 [ 115.634497] binder: BINDER_SET_CONTEXT_MGR already set [ 115.634509] binder: 17926:17929 ioctl 40046207 0 returned -16 [ 115.638229] binder: 17926:17929 ERROR: BC_REGISTER_LOOPER called without request [ 115.654149] binder_alloc: binder_alloc_mmap_handler: 17921 20000000-20002000 already mapped failed -16 [ 115.663176] binder: BINDER_SET_CONTEXT_MGR already set [ 115.663187] binder: 17921:17924 ioctl 40046207 0 returned -16 [ 115.669268] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.669299] binder: 17921:17924 transaction failed 29189/-3, size 40-0 line 2903 [ 115.685006] binder: 17921:17937 BC_ACQUIRE_DONE u0000000000000000 no match [ 115.685077] binder: 17921:17937 got reply transaction with no transaction stack [ 115.685085] binder: 17921:17937 transaction failed 29201/-71, size 0-0 line 2703 [ 115.722891] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.722926] binder: 17945:17948 transaction failed 29189/-3, size 0-8 line 2903 [ 115.741081] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.741109] binder: 17944:17957 transaction failed 29189/-3, size 0-0 line 2903 [ 115.741799] binder: BINDER_SET_CONTEXT_MGR already set [ 115.741809] binder: 17949:17952 ioctl 40046207 0 returned -16 [ 115.745344] binder: BINDER_SET_CONTEXT_MGR already set [ 115.745354] binder: 17954:17958 ioctl 40046207 0 returned -16 [ 115.748549] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.748580] binder: 17954:17958 transaction failed 29189/-3, size 40-0 line 2903 [ 115.752654] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.752686] binder: 17949:17952 transaction failed 29189/-3, size 40-0 line 2903 [ 115.761443] binder: 17953:17956 got reply transaction with no transaction stack [ 115.761453] binder: 17953:17956 transaction failed 29201/-71, size 0-0 line 2703 [ 115.766086] binder: BINDER_SET_CONTEXT_MGR already set [ 115.766096] binder: 17951:17955 ioctl 40046207 0 returned -16 [ 115.766164] binder: 17951:17955 ERROR: BC_REGISTER_LOOPER called without request [ 115.768987] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.769054] binder: 17951:17955 transaction failed 29189/-3, size 24-0 line 2903 [ 115.780845] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.780873] binder: 17944:17962 transaction failed 29189/-3, size 0-0 line 2903 [ 115.788805] binder: 17953:17956 got reply transaction with no transaction stack [ 115.788815] binder: 17953:17956 transaction failed 29201/-71, size 0-0 line 2703 [ 115.798199] binder: BINDER_SET_CONTEXT_MGR already set [ 115.798209] binder: 17951:17955 ioctl 40046207 0 returned -16 [ 115.798280] binder: 17951:17955 ERROR: BC_REGISTER_LOOPER called without request [ 115.800618] binder: BINDER_SET_CONTEXT_MGR already set [ 115.800628] binder: 17954:17958 ioctl 40046207 0 returned -16 [ 115.800697] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.800720] binder: 17954:17963 transaction failed 29189/-3, size 40-0 line 2903 [ 115.812806] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.812832] binder: 17951:17955 transaction failed 29189/-3, size 24-0 line 2903 [ 115.818855] binder: BINDER_SET_CONTEXT_MGR already set [ 115.818890] binder: 17967:17969 ioctl 40046207 0 returned -16 [ 115.825653] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.825684] binder: 17967:17969 transaction failed 29189/-3, size 40-0 line 2903 [ 115.858655] binder: 17972:17975 got reply transaction with no transaction stack [ 115.858666] binder: 17972:17975 transaction failed 29201/-71, size 0-0 line 2703 [ 115.860883] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.860908] binder: 17973:17976 transaction failed 29189/-3, size 0-0 line 2903 [ 115.862566] binder: BINDER_SET_CONTEXT_MGR already set [ 115.862575] binder: 17974:17977 ioctl 40046207 0 returned -16 [ 115.863980] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.864076] binder: 17974:17977 transaction failed 29189/-3, size 40-0 line 2903 [ 115.883528] binder: BINDER_SET_CONTEXT_MGR already set [ 115.883539] binder: 17974:17979 ioctl 40046207 0 returned -16 [ 115.883625] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.883651] binder: 17974:17980 transaction failed 29189/-3, size 40-0 line 2903 [ 115.890540] binder: 17974:17979 BC_ACQUIRE_DONE u0000000000000000 no match [ 115.890551] binder: 17974:17979 got reply transaction with no transaction stack [ 115.890560] binder: 17974:17979 transaction failed 29201/-71, size 0-0 line 2703 [ 115.933296] binder: BINDER_SET_CONTEXT_MGR already set [ 115.933306] binder: 17984:17989 ioctl 40046207 0 returned -16 [ 115.934413] binder: 17984:17989 ERROR: BC_REGISTER_LOOPER called without request [ 115.934679] binder: BINDER_SET_CONTEXT_MGR already set [ 115.934695] binder: 17982:17988 ioctl 40046207 0 returned -16 [ 115.944114] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.944139] binder: 17984:17989 transaction failed 29189/-3, size 24-0 line 2903 [ 115.953089] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.953123] binder: 17987:17991 transaction failed 29189/-3, size 0-8 line 2903 [ 115.953691] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.953754] binder: 17982:17988 transaction failed 29189/-3, size 40-0 line 2903 [ 115.954804] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.954825] binder: 17992:17994 transaction failed 29189/-3, size 0-0 line 2903 [ 115.973103] binder_alloc: binder_alloc_mmap_handler: 17984 20000000-20002000 already mapped failed -16 [ 115.981591] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.981617] binder: 17992:18000 transaction failed 29189/-3, size 0-0 line 2903 [ 115.983386] binder: BINDER_SET_CONTEXT_MGR already set [ 115.983397] binder: 17993:17996 ioctl 40046207 0 returned -16 [ 115.984544] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.984576] binder: 17993:17996 transaction failed 29189/-3, size 40-0 line 2903 [ 115.987563] binder: BINDER_SET_CONTEXT_MGR already set [ 115.987573] binder: 17984:17989 ioctl 40046207 0 returned -16 [ 115.989360] binder: 17984:17989 ERROR: BC_REGISTER_LOOPER called without request [ 115.991326] binder_alloc: 17845: binder_alloc_buf, no vma [ 115.991352] binder: 17987:17991 transaction failed 29189/-3, size 0-8 line 2903 [ 115.997465] binder_alloc: 17841: binder_alloc_buf, no vma [ 115.997489] binder: 17984:17989 transaction failed 29189/-3, size 24-0 line 2903 [ 116.000834] binder: 17986:18002 unknown command 0 [ 116.000844] binder: 17986:18002 ioctl c0306201 20d5a000 returned -22 [ 116.022158] binder: BINDER_SET_CONTEXT_MGR already set [ 116.022170] binder: 18007:18008 ioctl 40046207 0 returned -16 [ 116.027993] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.028090] binder: 18007:18008 transaction failed 29189/-3, size 40-0 line 2903 [ 116.040717] binder: BINDER_SET_CONTEXT_MGR already set [ 116.040728] binder: 17993:18011 ioctl 40046207 0 returned -16 [ 116.043280] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.043316] binder: 17993:17996 transaction failed 29189/-3, size 40-0 line 2903 [ 116.043536] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.043558] binder: 18009:18012 transaction failed 29189/-3, size 0-0 line 2903 [ 116.048080] binder: BINDER_SET_CONTEXT_MGR already set [ 116.048089] binder: 18010:18013 ioctl 40046207 0 returned -16 [ 116.048240] binder: 18010:18013 ERROR: BC_REGISTER_LOOPER called without request [ 116.049782] binder_alloc: 17841: binder_alloc_buf, no vma [ 116.049804] binder: 18010:18013 transaction failed 29189/-3, size 24-0 line 2903 [ 116.071063] binder: 17986:18002 unknown command 0 [ 116.071073] binder: 17986:18002 ioctl c0306201 20d5a000 returned -22 [ 116.072009] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.072082] binder: 18009:18012 transaction failed 29189/-3, size 0-0 line 2903 [ 116.074317] binder_alloc: binder_alloc_mmap_handler: 18010 20000000-20002000 already mapped failed -16 [ 116.075631] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.075661] binder: 18016:18017 transaction failed 29189/-3, size 0-8 line 2903 [ 116.088270] binder: BINDER_SET_CONTEXT_MGR already set [ 116.088282] binder: 18010:18020 ioctl 40046207 0 returned -16 [ 116.092886] binder: BINDER_SET_CONTEXT_MGR already set [ 116.092897] binder: 18022:18025 ioctl 40046207 0 returned -16 [ 116.093240] binder: 18010:18013 ERROR: BC_REGISTER_LOOPER called without request [ 116.094395] binder_alloc: 17841: binder_alloc_buf, no vma [ 116.094423] binder: 18010:18020 transaction failed 29189/-3, size 24-0 line 2903 [ 116.095754] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.095784] binder: 18022:18025 transaction failed 29189/-3, size 40-0 line 2903 [ 116.103322] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.103352] binder: 18016:18017 transaction failed 29189/-3, size 0-8 line 2903 [ 116.119411] binder: BINDER_SET_CONTEXT_MGR already set [ 116.119422] binder: 18022:18027 ioctl 40046207 0 returned -16 [ 116.124354] binder_alloc: 17845: binder_alloc_buf, no vma [ 116.124384] binder: 18022:18025 transaction failed 29189/-3, size 40-0 line 2903 [ 117.911004] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000ef7000-0x18)={0x40, 0x4, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00009e1000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000d9e000-0x4)=0x8) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000db9000)={&(0x7f0000e67000/0x2000)=nil, 0x2000}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000849000-0xe8)={{{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000013a000)=0xe8) 2018/01/25 21:01:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000fd6000)='/dev/snd/midiC#D#\x00', 0x5, 0x4000) accept$alg(r1, 0x0, 0x0) eventfd(0x2) r2 = epoll_create(0x4000000010011) bind$bt_hci(r1, &(0x7f00003aa000-0x6)={0x1f, 0x100, 0x1}, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) setitimer(0x3, &(0x7f0000ce4000-0x20)={{0x0, 0x0}, {0x77359400, 0x0}}, &(0x7f0000e87000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000d8c000-0x14)={@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f00000c9000)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00004e8000-0x50)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1, 0x40, 0x8, 0x400, 0x200, 0x4, r1}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) restart_syscall() timer_create(0x7, &(0x7f0000777000)={0x0, 0xd, 0x5, @thr={&(0x7f00008eb000)="9a86fa9a1b337318e1250ff7aedd82c3d881adb5e0895baa7877380141636f0a951d1cb53469bfed71d2354654da", &(0x7f0000444000-0xa9)="6efc365cd81bd803da7675abcb52bce11ef4b1d6c559557be9cb52765ccd0b2073e7aecae9dd76a41953bf1a971ce970f0011690f689ff8502ff177d84089c3b234c9936687741642c19105d09f8bd32b9ce3cdf38ce1ea6ad31af822ee73e92f9c1485a30b0ea7ee1942e902fe0e1bfdaa6a99af01108ffa9cd6be0c8e454d4ee5156968cb71f2c1cfbcfe6cc0a770f6ed272119bb97a990106359e7a639fa85c63cde5c9023e7360"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000033d000)=0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00002fd000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000952000-0x4)=0x0) timer_getoverrun(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000e6c000-0x11)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 117.923125] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.928754] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.934287] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.941418] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:44 executing program 6: openat$rtc(0xffffffffffffff9c, &(0x7f0000741000-0x9)='/dev/rtc\x00', 0x50000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x2d, 0x0, &(0x7f00002ab000-0x2d)="650000000518088e7887db32b059de4304e8cd1c89e42d2cad6b0bdf78c11c1c48714b98f8ccb543b397165331"}) [ 117.952979] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/25 21:01:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000ef7000-0x18)={0x40, 0x4, 0x0}) 2018/01/25 21:01:44 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000318000+0xfd5)='/dev/snd/midiC#D#\x00', 0x8a8d, 0x20102) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x122, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) socketpair(0x10, 0x807, 0x1000, &(0x7f0000790000-0x8)={0x0, 0x0}) fchmodat(r4, &(0x7f000011e000-0x8)='./file0\x00', 0x180) 2018/01/25 21:01:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f00002bf000)='/dev/amidi#\x00', 0x80000000, 0x1) mknodat(r2, &(0x7f0000ffb000)='./file0\x00', 0x8000, 0x200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x4}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd68731732d0aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000b4e000-0xd)='/dev/binder#\x00', 0x0, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f000005b000-0x12)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff0000, 0x101000) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000b20000-0x8)=0x0) tee(r1, r0, 0x7, 0x2) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0xfffffffffffffe4a, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f000070f000)=[@in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x30) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f000048d000-0x1)=0x5, &(0x7f00004e4000-0x8)=0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000a2000-0x88)={0x7fda, {{0xa, 0x1, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xfffffffffffffe97) socket$nfc_raw(0x27, 0x3, 0x0) 2018/01/25 21:01:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00006b0000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000bc0000)={0x2, 0x2, 0x1, 0x0, 0x0}) accept$inet(r0, &(0x7f0000a2a000-0x10)={0x0, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000085c000)=0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000033a000-0x10)='/dev/sequencer2\x00', 0x52000, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f000036f000)={0x15, 0x2, 0x1, 0x0}) socketpair$inet(0x2, 0x0, 0x1, &(0x7f00000cb000)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:44 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/qat_adf_ctl\x00', 0x220000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f00005c5000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 117.952993] binder: 18031:18034 ioctl 40046207 0 returned -16 [ 117.961720] binder: 18030:18042 got reply transaction with no transaction stack [ 117.961730] binder: 18030:18042 transaction failed 29201/-71, size 0-0 line 2703 [ 117.963539] binder: 18033:18041 transaction failed 29189/-22, size 0-0 line 2788 [ 117.963764] binder_alloc: 17845: binder_alloc_buf, no vma [ 117.963796] binder: 18031:18034 transaction failed 29189/-3, size 40-0 line 2903 [ 117.966612] binder: BINDER_SET_CONTEXT_MGR already set [ 117.966621] binder: 18035:18040 ioctl 40046207 0 returned -16 [ 117.966694] binder: 18035:18040 ERROR: BC_REGISTER_LOOPER called without request [ 117.978380] binder_alloc: 17841: binder_alloc_buf, no vma [ 117.978409] binder: 18035:18040 transaction failed 29189/-3, size 24-0 line 2903 [ 117.981081] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/25 21:01:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00006f9000)={0x9, 0x7ff, 0x4, 0x7e, &(0x7f0000a79000)=""/126, 0x25, &(0x7f0000fa7000-0x25)=""/37, 0x53, &(0x7f0000cb0000)=""/83}) 2018/01/25 21:01:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x1) r2 = socket$kcm(0x29, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = semget(0x0, 0x1, 0x100) semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f0000a0c000)=""/140) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) fcntl$getflags(r0, 0x3) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000337000-0xc)={0x10000000, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000578000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f000054c000-0x8)='./file0\x00', 0x100) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000b39000)=0x0) ptrace$getsig(0x4202, r2, 0x6d50, &(0x7f0000e61000-0x10)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00007a8000)=0x9) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000eaa000-0x4)=r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$keyring(&(0x7f0000ac0000)='keyring\x00', &(0x7f0000c74000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$invalidate(0x15, r1) r2 = add_key$keyring(&(0x7f00001c8000)='keyring\x00', &(0x7f000022b000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$setperm(0x5, r2, 0x22100008) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x0, 0x0, &(0x7f0000009000)=""}) syz_open_dev$sndpcmp(&(0x7f0000614000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000951000)='/dev/loop#\x00', 0x80000000, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000acd000-0x30)={0x44, 0x0, &(0x7f0000005000-0x44)=[], 0xfffffffffffffc4f, 0x0, &(0x7f0000009000)=""}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f000067a000-0xb)='/dev/audio\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00006b9000)=0x0, &(0x7f0000213000-0x4)=0x4) 2018/01/25 21:01:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000b09000-0xa)='/dev/vcs#\x00', 0xfff, 0x400000) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000750000)="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") r2 = gettid() sendmsg$nl_generic(r1, &(0x7f0000075000)={&(0x7f00009e5000-0xc)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000480000)={&(0x7f00008ab000)={0x130c, 0x3c, 0x2, 0x5, 0x3, {0x1d, 0x0, 0x0}, [@nested={0x12ec, 0x28, [@generic="9b77b8f62b9c18c570c363ace90da821e06702bd3e6812274bafde013e37f1893dacf9187de3f4f0021949bbc0abb2e0c47bccbc9f7dff1704ca10b3df77ba54113fe552ef3badf7932705629805621d3c7cb8dce6ec173afae41ad9643578334609822a9d4891b0e6ff08a45d1bf0abdc474e4a1881d51a30309018ff2cadea5a9674af8c9d816247f996fab1ef8fbc8c1a6427534e0d05c204a6a81df7cdaa27a42f43431f49f5390954edbd16be66af9ac3dcd2b16b2ca5fe18c256c632f26ab196829238272fe46fded6da1c8706c7af9394586ed019396c163f24a888f058e2f174631d75ef0d026e2932f9bec942b660b054eb40", @typed={0x1008, 0x2a, @binary="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"}, @generic="6d7880435b2ecc1b82903e11ef7e753dd95b3feb9cc7e3a18a5a31cf6390defcf9284840bf07b35fe5b95256d5a8f2ce2e6416a06d8757682f8185a4b1bbde4bf4413b2be64fa447b9832fdb1f759c233d4afc4faf64f97f6520e2ec55d3c57a7674e07966a27d09f9025bed7f184df465b22444146d4b0ea559a17941a0c727bb7ec8eb8fc3444034f486a17b2738558c653e9eee3a1e22a59c2f1946d37b70f6ce4050871c9f45fe028f32a86f0ccb945dba8a6553605bb2b0d9fcc1ccc0315bd179bb26fd6f626e308fcb7f4d36f04dd2ed23a57e03067d0f21f11f61123f68744875de69f440ebf713c45b6a", @typed={0xe8, 0x23, @binary="de1817104d544957fb43382604e1f77d9d7b05bd01354210dc12148d6824345235b9ba6fd7561cce2c6ca7b5a13f3da7032b5437ea40aca2ab6c69e46a56f4eb24df40a79fa320eabf0702b069a35120ca056e049b80cd3f704d69fec0aeee6e779d962c0385bdb6f5835b04b74b0d2b5ba6e96f28eae460031c1bcca87fb65a64cf97e1a075f2a439ee913bc34a0e883468cbcf99c4f830688feaa220a65e96f9e88614f629dab8b1abceb9c55f3977f60f9a877241f3ef5bbfca494499ebcedaa1cbf43434c98f144372a9252c7a57496e340ef44c9d6e78408a73d46a70"}, @generic="bc29756816edf76bd7b5e71a2960363aca"]}, @typed={0xc, 0x8c, @pid=r2}]}, 0x130c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) ioctl$TIOCNXCL(r1, 0x540d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000d43000-0x9)='/dev/vcs\x00', 0x0, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000c47000)=0x7, 0x4) r4 = geteuid() ioctl$TUNSETOWNER(r3, 0x400454cc, &(0x7f0000ba3000-0x4)=r4) getsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000f1d000)={@rand_addr=0x0, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, @empty=0x0}, &(0x7f0000a63000)=0xc) open(&(0x7f0000dfe000)='./file0\x00', 0x101000, 0x8) [ 117.981092] binder: 18038:18043 ioctl 40046207 0 returned -16 [ 117.983964] binder_alloc: 17845: binder_alloc_buf, no vma [ 117.983996] binder: 18038:18043 transaction failed 29189/-3, size 40-0 line 2903 [ 117.999506] binder_alloc: binder_alloc_mmap_handler: 18035 20000000-20002000 already mapped failed -16 [ 118.009441] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/25 21:01:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x8, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) syz_open_dev$sndpcmp(&(0x7f00009a9000)='/dev/snd/pcmC#D#p\x00', 0x51605e62, 0x151000) 2018/01/25 21:01:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000080c000)='/dev/sg#\x00', 0xfffffffffffffff7, 0x40000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00005db000)={0x9, 0x1000, 0xc8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000c82000-0x8)=[{0x4, 0x30b2b95f}], 0x1) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000dcc000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00006b2000)={0x0, 0x0}) getsockname$inet(r2, &(0x7f000061a000)={0x0, 0xffffffffffffffff, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f01000-0x4)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) [ 118.009463] binder: 18035:18040 ioctl 40046207 0 returned -16 [ 118.009494] binder: 18035:18051 ERROR: BC_REGISTER_LOOPER called without request [ 118.012282] binder: BINDER_SET_CONTEXT_MGR already set [ 118.012292] binder: 18038:18056 ioctl 40046207 0 returned -16 [ 118.012531] binder_alloc: 17841: binder_alloc_buf, no vma [ 118.012556] binder: 18035:18051 transaction failed 29189/-3, size 24-0 line 2903 [ 118.014050] binder: 18033:18041 transaction failed 29189/-22, size 0-0 line 2788 [ 118.014523] binder_alloc: 17845: binder_alloc_buf, no vma [ 118.014554] binder: 18038:18043 transaction failed 29189/-3, size 40-0 line 2903 [ 118.034824] binder: BINDER_SET_CONTEXT_MGR already set [ 118.034834] binder: 18054:18057 ioctl 40046207 0 returned -16 [ 118.045049] binder: 18048:18055 got reply transaction with no transaction stack [ 118.045058] binder: 18048:18055 transaction failed 29201/-71, size 0-0 line 2703 [ 118.072298] binder: BINDER_SET_CONTEXT_MGR already set [ 118.072307] binder: 18060:18062 ioctl 40046207 0 returned -16 [ 118.080106] binder: 18060:18062 ERROR: BC_REGISTER_LOOPER called without request [ 118.082932] binder_alloc: 17841: binder_alloc_buf, no vma [ 118.082963] binder: 18060:18062 transaction failed 29189/-3, size 24-0 line 2903 [ 118.096980] binder: 18070:18073 got reply transaction with no transaction stack [ 118.096991] binder: 18070:18073 transaction failed 29201/-71, size 0-0 line 2703 [ 118.099078] binder_alloc: binder_alloc_mmap_handler: 18060 20000000-20002000 already mapped failed -16 [ 118.111347] binder: BINDER_SET_CONTEXT_MGR already set [ 118.111360] binder: 18060:18062 ioctl 40046207 0 returned -16 [ 118.111408] binder: 18060:18074 ERROR: BC_REGISTER_LOOPER called without request [ 118.121616] binder: BINDER_SET_CONTEXT_MGR already set [ 118.121627] binder: 18063:18080 ioctl 40046207 0 returned -16 [ 118.124578] binder: 18070:18077 got reply transaction with no transaction stack [ 118.124588] binder: 18070:18077 transaction failed 29201/-71, size 0-0 line 2703 [ 118.138415] binder_alloc: 17845: binder_alloc_buf, no vma [ 118.138465] binder: 18063:18080 transaction failed 29189/-3, size 40-0 line 2903 [ 118.191646] binder_alloc: 17845: binder_alloc_buf, no vma [ 118.191679] binder: 18063:18080 transaction failed 29189/-3, size 40-0 line 2903 [ 118.191738] binder: BINDER_SET_CONTEXT_MGR already set [ 118.191747] binder: 18063:18068 ioctl 40046207 0 returned -16 [ 118.220918] binder: BINDER_SET_CONTEXT_MGR already set [ 118.220929] binder: 18084:18088 ioctl 40046207 0 returned -16 [ 118.235149] binder: BINDER_SET_CONTEXT_MGR already set [ 118.235159] binder: 18089:18091 ioctl 40046207 0 returned -16 [ 118.235247] binder: 18089:18091 ERROR: BC_REGISTER_LOOPER called without request [ 118.239773] binder: 18087:18096 unknown command 0 [ 118.239783] binder: 18087:18096 ioctl c0306201 20accfd0 returned -22 [ 118.244223] binder_alloc: 17841: binder_alloc_buf, no vma [ 118.244251] binder: 18089:18091 transaction failed 29189/-3, size 24-0 line 2903 [ 118.249711] binder: BINDER_SET_CONTEXT_MGR already set [ 118.249721] binder: 18093:18100 ioctl 40046207 0 returned -16 [ 118.255686] binder: 18092:18097 got reply transaction with no transaction stack [ 118.255696] binder: 18092:18097 transaction failed 29201/-71, size 0-0 line 2703 [ 118.258159] binder: 18093:18100 BC_ACQUIRE_DONE u0000000000000000 no match [ 118.258169] binder: 18093:18100 got reply transaction with no transaction stack [ 118.258177] binder: 18093:18100 transaction failed 29201/-71, size 0-0 line 2703 [ 118.273280] binder_alloc: binder_alloc_mmap_handler: 18089 20000000-20002000 already mapped failed -16 [ 118.278827] binder_alloc: 17845: binder_alloc_buf, no vma [ 118.278860] binder: 18094:18098 transaction failed 29189/-3, size 0-8 line 2903 [ 118.282529] binder: 18087:18096 unknown command 0 [ 118.282540] binder: 18087:18096 ioctl c0306201 20accfd0 returned -22 [ 118.283571] binder: BINDER_SET_CONTEXT_MGR already set [ 118.283631] binder: 18089:18102 ioctl 40046207 0 returned -16 [ 118.284789] binder: 18089:18091 ERROR: BC_REGISTER_LOOPER called without request [ 118.291728] binder: BINDER_SET_CONTEXT_MGR already set [ 118.291741] binder: 18093:18109 ioctl 40046207 0 returned -16 [ 118.315533] binder: BINDER_SET_CONTEXT_MGR already set [ 118.315546] binder: 18107:18111 ioctl 40046207 0 returned -16 [ 118.335705] binder: 18112:18114 got reply transaction with no transaction stack [ 118.335714] binder: 18112:18114 transaction failed 29201/-71, size 0-592 line 2703 [ 118.335841] binder: BINDER_SET_CONTEXT_MGR already set [ 118.335848] binder: 18115:18117 ioctl 40046207 0 returned -16 [ 118.335936] binder: 18115:18117 ERROR: BC_REGISTER_LOOPER called without request [ 118.338282] binder_alloc: 17841: binder_alloc_buf, no vma [ 118.338306] binder: 18115:18117 transaction failed 29189/-3, size 24-0 line 2903 [ 118.345562] binder_alloc: binder_alloc_mmap_handler: 18115 20000000-20002000 already mapped failed -16 [ 118.369150] binder: BINDER_SET_CONTEXT_MGR already set [ 118.369162] binder: 18115:18117 ioctl 40046207 0 returned -16 [ 118.371281] binder: 18115:18120 ERROR: BC_REGISTER_LOOPER called without request [ 118.393777] binder_alloc: 17845: binder_alloc_buf, no vma [ 118.393810] binder: 18094:18113 transaction failed 29189/-3, size 0-8 line 2903 [ 118.818397] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.818587] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.818841] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.818852] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.819084] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.819132] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819152] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819262] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819316] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.819392] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819412] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819532] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819541] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819617] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.819627] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819650] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819702] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819755] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.819887] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819909] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.819957] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.819980] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.820095] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820219] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820295] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.820315] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.820357] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820378] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820421] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820442] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820493] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820536] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.820556] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.820602] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820623] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820677] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820753] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820893] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820915] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.820964] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.821039] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.821096] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.821171] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.821215] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.821235] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.821287] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.821391] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.821411] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.821454] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.821495] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.827274] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.827320] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.827489] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.827667] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.827716] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.827889] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.827933] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828216] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828282] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828320] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828477] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828535] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828595] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828636] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828697] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828707] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.828748] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828759] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.828957] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.828990] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.829081] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.829121] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x10, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000e2a000)='./file0\x00', 0x400, 0x82) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f00003de000-0x58)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) time(&(0x7f000056b000)=0x0) 2018/01/25 21:01:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00007c7000-0x4)=0x0, 0x4) close(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f000090e000-0x54)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x7, 0x2, &(0x7f0000210000-0x8)={0xd0}, 0x8) getxattr(&(0x7f0000d61000)='./file0\x00', &(0x7f0000da2000-0x5)=@random={'os2.', '\x00'}, &(0x7f000025e000)=""/107, 0x6b) r3 = syz_open_dev$dmmidi(&(0x7f0000d14000-0xd)='/dev/dmmidi#\x00', 0x9, 0x501040) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000454000-0x4)=0xffff, 0x4) r4 = socket$kcm(0x29, 0x5, 0x0) socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f9a000)={0x80002004, 0x0}) socket(0xb, 0x0, 0x7) 2018/01/25 21:01:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:45 executing program 0: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00004a7000)=0xd0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000c51000-0x8)='./file0\x00', 0x10800, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) r3 = openat(r1, &(0x7f00003e7000-0x8)='./file0\x00', 0x4000, 0x40) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00008a4000-0x4)=0x9) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000bf5000-0x10)={0x2, &(0x7f0000530000)=[{0x0, 0x0}, {0x0, 0x0}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) [ 118.829295] binder: release 17845:17849 transaction 623 out, still active [ 118.829300] binder: undelivered TRANSACTION_COMPLETE [ 118.829307] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.829325] binder: send failed reply for transaction 623, target dead [ 118.833971] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.833982] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.257448] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.263383] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.289075] binder: 18121:18127 ERROR: BC_REGISTER_LOOPER called without request [ 119.294501] binder: 18126:18128 BC_ACQUIRE_DONE node 719 has no pending acquire request [ 119.294518] binder: 18126:18128 got reply transaction with bad transaction stack, transaction 720 has target 18126:0 [ 119.294529] binder: 18126:18128 transaction failed 29201/-71, size 0-0 line 2718 [ 119.308228] binder_alloc: binder_alloc_mmap_handler: 18126 20000000-20002000 already mapped failed -16 [ 119.310210] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/25 21:01:45 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/qat_adf_ctl\x00', 0x288180, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000000)={0x285, 0x7, 0x0}) r3 = fcntl$dupfd(r0, 0x406, r0) getsockname(r3, &(0x7f0000c76000-0x6)=@hci={0x0, 0x0, 0x0}, &(0x7f0000399000)=0x6) 2018/01/25 21:01:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = shmget(0x1, 0x2000, 0x10, &(0x7f00005c8000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000ace000-0xe)='/selinux/user\x00', 0x2, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000e11000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 119.310220] binder: 18126:18128 ioctl 40046207 0 returned -16 [ 119.310451] binder_alloc: 18126: binder_alloc_buf, no vma [ 119.310474] binder: 18126:18135 transaction failed 29189/-3, size 40-0 line 2903 [ 119.318107] binder: BINDER_SET_CONTEXT_MGR already set [ 119.318117] binder: 18129:18132 ioctl 40046207 0 returned -16 [ 119.320840] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.321161] binder: release 18126:18128 transaction 720 out, still active [ 119.321166] binder: undelivered TRANSACTION_COMPLETE 2018/01/25 21:01:45 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000c57000-0xb)='/dev/audio\x00', 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f000098d000-0xdb)="d1910bf09aa2f0fcbd74cda60bb46670a89be1900b5238cab4ab09fceccf4b1df5aaf8a7a3240ed71db607460917ff1a83b22724f87fc4c8b9e78a72fa35feb6f1e2a880119d4352c45e86698bfb56df94678b0fae145de09a8b31fc9ad122ace0dfed4b6c466a9de63ada9b46976f972e424d35f030b20068dd8049a02df437c4ffccd834eda6da096c1d100e3c1e852f85f75123a6dcff74b7b2a4e2e343534c51913fa1066d4148d2ba58616bf9ce35647965bd76ecbe048fdb7f79686daf40d937a1b3fb80e7757c48d87bb1e8e51be73415e8d26d11c50d9d") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 119.321173] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.321193] binder: send failed reply for transaction 720, target dead [ 119.327858] binder: 18124:18136 transaction failed 29189/-22, size 0-8 line 2788 [ 119.347924] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.429541] binder: 18145:18152 BC_ACQUIRE_DONE node 724 has no pending acquire request 2018/01/25 21:01:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000cac000-0x8)=0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00002c0000-0x4)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bae000-0xb)='/dev/hwrng\x00', 0x4400, 0x0) fdatasync(r2) io_cancel(r0, &(0x7f0000af3000-0x40)={0x0, 0x0, 0x0, 0x9, 0x4c4e, r1, &(0x7f0000288000)="5a02eeee531cd039dda5cb5fd95de9e079c61b9f6f388e5e65f10e96098982df4e58e16b155f45efdf2d629367c78301727cd8e9b3dc8e608117c8d72380165086f7f9c4c4611c7b3ff390dd46617f74ae2e6e75c6052fbe8b9230381d86a746d241c845f96fc6180eaeebede297c3a49370a3f36019ad59346d67ade72999fbded012c72a7e950eb6b2d7e4db305a9679d1da12fa09a79a0543925207d6d477ff2ac70a71832208c8470cf28ddd3373fc76853913c0b1e6e2f4613d4d76f0e39a85df96d9279a", 0xc7, 0x4fb11397, 0x0, 0x0, r2}, &(0x7f0000d87000-0x20)={0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000121000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = creat(&(0x7f00003a4000)='./file0\x00', 0x323afc2f8f99252b) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000fe1000-0xdb)=""/219) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 119.437853] binder: 18145:18152 got reply transaction with bad transaction stack, transaction 725 has target 18145:0 [ 119.448595] binder: 18145:18152 transaction failed 29201/-71, size 0-0 line 2718 [ 119.458190] binder: BINDER_SET_CONTEXT_MGR already set [ 119.458201] binder: 18146:18156 ioctl 40046207 0 returned -16 [ 119.474571] binder: release 18151:18154 transaction 728 out, still active [ 119.474578] binder: undelivered TRANSACTION_COMPLETE [ 119.474727] binder: release 18151:18154 transaction 727 out, still active [ 119.474731] binder: undelivered TRANSACTION_COMPLETE [ 119.479540] binder: BINDER_SET_CONTEXT_MGR already set [ 119.479553] binder: 18121:18160 ioctl 40046207 0 returned -16 [ 119.479573] binder_alloc: binder_alloc_mmap_handler: 18121 20000000-20002000 already mapped failed -16 [ 119.480275] binder: 18159:18165 got reply transaction with no transaction stack [ 119.480284] binder: 18159:18165 transaction failed 29201/-71, size 0-0 line 2703 [ 119.485548] binder: 18121:18158 ERROR: BC_REGISTER_LOOPER called without request [ 119.496821] binder: BINDER_SET_CONTEXT_MGR already set [ 119.496831] binder: 18145:18170 ioctl 40046207 0 returned -16 [ 119.496880] binder: 18159:18169 got reply transaction with no transaction stack [ 119.496888] binder: 18159:18169 transaction failed 29201/-71, size 0-0 line 2703 [ 119.498707] binder_alloc: 18145: binder_alloc_buf, no vma [ 119.498736] binder: 18162:18166 transaction failed 29189/-3, size 0-8 line 2903 [ 119.505542] binder_alloc: 18121: binder_alloc_buf, no vma [ 119.505567] binder: 18121:18150 transaction failed 29189/-3, size 24-0 line 2903 [ 119.511098] binder_alloc: 18145: binder_alloc_buf, no vma [ 119.511132] binder: 18145:18167 transaction failed 29189/-3, size 40-0 line 2903 [ 119.511174] binder: 18145:18170 BC_ACQUIRE_DONE u0000000000000000 no match [ 119.511182] binder: 18145:18170 got reply transaction with no transaction stack [ 119.511190] binder: 18145:18170 transaction failed 29201/-71, size 0-0 line 2703 [ 119.515903] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.515914] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.674330] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.679845] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.685407] binder: release 18145:18152 transaction 725 out, still active [ 119.692350] binder: undelivered TRANSACTION_COMPLETE [ 119.697471] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.702950] binder: send failed reply for transaction 725, target dead [ 119.709633] binder: send failed reply for transaction 727, target dead [ 119.716351] binder: send failed reply for transaction 728, target dead 2018/01/25 21:01:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f000054c000)=""/28) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sync_file_range(r0, 0x8, 0x8, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:45 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000774000)={{&(0x7f0000db7000/0x2000)=nil, 0x2000}, 0x1, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000df2000)={0x3, 0xffffffffffffff9c, 0x1}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000580000-0x8)=0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000903000)="b5fcdd0410ba432ae678dc71c0b1dcd758f69d9874a589b8cb4e62c2d3377eeed8617b8c204a98b9c994a762e1d3acd01f83357b6668b474c44759b78a0af4c2631b431d455a8b083e78d75f46089b0e085513ee1ee45b0e68185d61417c492401c9223a58e172401d61aaa4c17445fa937ecc7d4f3afee8a4456ad63b420bb27eac96e9ae1597e25d7baa853d5cc89a376d3c12348f41249a93be47718045cc6b122de1c77725b204c7a875139bd36de5c109f1e8f9a55e7a76f50dca99eb85021ec8ed27003c7b8115503c14b3666073265dba2cf9db0e8264b88812a965d066fa577037ae9ab169") ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00008c8000)={0x6e5a2936, 0x2, 0x551, 'queue0\x00', 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = epoll_create1(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a0c000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f0000daa000-0x8)={0x0, 0x0}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c49000-0x10)={&(0x7f000037b000/0x4000)=nil, 0x4000}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xffffffffffffffba, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) [ 119.731124] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.750885] binder: 18174:18178 ERROR: BC_REGISTER_LOOPER called without request [ 119.763642] binder: 18175:18177 transaction failed 29189/-22, size 0-0 line 2788 2018/01/25 21:01:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 119.779498] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/25 21:01:45 executing program 2 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = syz_open_dev$mice(&(0x7f0000bf1000)='/dev/input/mice\x00', 0x0, 0x407ffc) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000bf1000)={0x8000, 0x7ff}) 2018/01/25 21:01:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000006c000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f000059a000)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) mmap$binder(&(0x7f000039a000/0x2000)=nil, 0x2000, 0x1, 0x6010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000dfe000-0x30)={0x3, 0x0, &(0x7f0000005000-0x44)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00009fd000-0x10)='/selinux/status\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000213000-0x2)=0x9f02, &(0x7f000042e000)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) init_module(&(0x7f0000268000)='\x00', 0x1, &(0x7f0000a11000)='/dev/binder#\x00') 2018/01/25 21:01:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {0xffffffffffffffff, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) [ 119.779516] binder: 18181:18183 ioctl 40046207 0 returned -16 [ 119.780590] binder_alloc: 18176: binder_alloc_buf, no vma [ 119.780623] binder: 18181:18183 transaction failed 29189/-3, size 40-0 line 2903 [ 119.781350] binder: 18174:18188 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 119.792425] binder: 18179:18186 got reply transaction with no transaction stack [ 119.792438] binder: 18179:18186 transaction failed 29201/-71, size 0-0 line 2703 [ 119.796270] binder_alloc: binder_alloc_mmap_handler: 18174 20000000-20002000 already mapped failed -16 [ 119.799444] binder: BINDER_SET_CONTEXT_MGR already set [ 119.799452] binder: 18174:18178 ioctl 40046207 0 returned -16 [ 119.802045] binder_alloc: 18174: binder_alloc_buf, no vma [ 119.802072] binder: 18174:18188 transaction failed 29189/-3, size 24-0 line 2903 [ 119.802910] binder: 18174:18178 ERROR: BC_REGISTER_LOOPER called without request [ 119.816529] binder: 18181:18197 BC_ACQUIRE_DONE node 742 has no pending acquire request [ 119.816543] binder: 18181:18197 got reply transaction with no transaction stack [ 119.816552] binder: 18181:18197 transaction failed 29201/-71, size 0-0 line 2703 [ 119.817389] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.832605] binder: undelivered transaction 739, process died. [ 119.842305] binder: release 18181:18191 transaction 743 out, still active [ 119.842311] binder: undelivered TRANSACTION_COMPLETE [ 119.842327] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.842346] binder: send failed reply for transaction 743, target dead [ 119.842357] binder: send failed reply for transaction 745 to 18175:18199 [ 119.842673] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.851844] binder: 18200:18204 got reply transaction with no transaction stack [ 119.851854] binder: 18200:18204 transaction failed 29201/-71, size 0-0 line 2703 [ 119.858196] FAULT_INJECTION: forcing a failure. [ 119.858196] name failslab, interval 1, probability 0, space 0, times 0 [ 119.858207] CPU: 1 PID: 18205 Comm: syz-executor2 Not tainted 4.15.0-rc9+ #280 [ 119.858214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.858217] Call Trace: [ 119.858236] dump_stack+0x194/0x257 [ 119.858260] ? arch_local_irq_restore+0x53/0x53 [ 119.858309] should_fail+0x8c0/0xa40 [ 119.858334] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 119.858349] ? perf_trace_run_bpf_submit+0x206/0x330 [ 119.858363] ? check_noncircular+0x20/0x20 [ 119.858387] ? perf_tp_event+0xae0/0xae0 [ 119.858425] ? find_held_lock+0x35/0x1d0 [ 119.858509] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 119.858516] ? lock_downgrade+0x980/0x980 [ 119.858536] ? rcu_note_context_switch+0x710/0x710 [ 119.858547] ? lock_release+0xa40/0xa40 [ 119.858556] ? perf_tp_event+0xae0/0xae0 [ 119.858593] should_failslab+0xec/0x120 [ 119.858612] kmem_cache_alloc_trace+0x4b/0x750 [ 119.858619] ? memset+0x31/0x40 [ 119.858673] binder_get_thread+0x1cf/0x870 [ 119.858699] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 119.858728] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 119.858750] ? rcu_note_context_switch+0x710/0x710 [ 119.858779] ? __might_sleep+0x95/0x190 [ 119.858805] binder_ioctl+0x20c/0x1417 [ 119.858837] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 119.858874] ? avc_ss_reset+0x110/0x110 [ 119.858882] ? lock_downgrade+0x980/0x980 [ 119.858906] ? lock_release+0xa40/0xa40 [ 119.858930] ? __lock_is_held+0xb6/0x140 [ 119.859025] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 119.859036] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 119.859053] ? rcu_note_context_switch+0x710/0x710 [ 119.859090] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 119.859101] do_vfs_ioctl+0x1b1/0x1520 [ 119.859108] ? _cond_resched+0x14/0x30 [ 119.859137] ? ioctl_preallocate+0x2b0/0x2b0 [ 119.859160] ? selinux_capable+0x40/0x40 [ 119.859180] ? __sb_end_write+0xa0/0xd0 [ 119.859210] ? fput+0xd2/0x140 [ 119.859247] ? security_file_ioctl+0x89/0xb0 [ 119.859273] SyS_ioctl+0x8f/0xc0 [ 119.859301] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 119.859309] RIP: 0033:0x452f19 [ 119.859314] RSP: 002b:00007fa6453abc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 119.859325] RAX: ffffffffffffffda RBX: 00007fa6453abaa0 RCX: 0000000000452f19 [ 119.859330] RDX: 0000000020008000 RSI: 00000000c0306201 RDI: 0000000000000014 [ 119.859336] RBP: 00007fa6453aba90 R08: 0000000000000000 R09: 0000000000000000 [ 119.859341] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7c96 [ 119.859346] R13: 00007fa6453abbc8 R14: 00000000004b7c96 R15: 0000000000000000 [ 119.863983] binder: 18201:18205 ioctl c0306201 20008000 returned -12 [ 119.865546] binder: 18201:18205 BC_ACQUIRE_DONE u0000000000000000 no match [ 119.865558] binder: 18201:18205 got reply transaction with no transaction stack [ 119.865568] binder: 18201:18205 transaction failed 29201/-71, size 0-0 line 2703 [ 119.865672] QAT: Invalid ioctl [ 119.873643] QAT: Invalid ioctl [ 119.874445] binder: 18207:18212 BC_ACQUIRE_DONE node 748 has no pending acquire request [ 119.874464] binder: 18207:18212 got reply transaction with bad transaction stack, transaction 749 has target 18207:0 [ 119.874477] binder: 18207:18212 transaction failed 29201/-71, size 0-0 line 2718 [ 119.879112] binder: 18200:18213 got reply transaction with no transaction stack [ 119.879120] binder: 18200:18213 transaction failed 29201/-71, size 0-0 line 2703 [ 119.883826] binder: 18206:18211 ERROR: BC_REGISTER_LOOPER called without request [ 119.884901] binder: 18206:18211 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 119.889314] QAT: Invalid ioctl [ 119.889610] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.892123] binder: BINDER_SET_CONTEXT_MGR already set [ 119.892132] binder: 18207:18216 ioctl 40046207 0 returned -16 [ 119.894439] binder_alloc: 18207: binder_alloc_buf, no vma [ 119.894467] binder: 18207:18212 transaction failed 29189/-3, size 40-0 line 2903 [ 119.894504] binder: 18207:18216 BC_ACQUIRE_DONE u0000000000000000 no match [ 119.894511] binder: 18207:18216 got reply transaction with no transaction stack [ 119.894518] binder: 18207:18216 transaction failed 29201/-71, size 0-0 line 2703 [ 119.900750] QAT: Invalid ioctl [ 119.904780] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.904792] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.906055] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.906066] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.906236] binder: release 18207:18212 transaction 749 out, still active [ 119.906241] binder: undelivered TRANSACTION_COMPLETE [ 119.906251] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.906268] binder: send failed reply for transaction 749, target dead [ 119.914720] binder_alloc: binder_alloc_mmap_handler: 18206 20000000-20002000 already mapped failed -16 [ 119.931352] binder: BINDER_SET_CONTEXT_MGR already set [ 119.931360] binder: 18206:18211 ioctl 40046207 0 returned -16 [ 119.931428] binder: 18206:18218 ERROR: BC_REGISTER_LOOPER called without request [ 119.938411] binder: undelivered transaction 753, process died. 2018/01/25 21:01:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b7, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000061c000-0x2)='\\\x00', 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000b8f000)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000bd7000-0xae)=""/174, &(0x7f0000b74000-0x4)=0xae) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xddd) 2018/01/25 21:01:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x2) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000795000-0x5c)={{0xa, 0x2, 0x40, @loopback={0x0, 0x1}, 0x100000001}, {0xa, 0x2, 0x5, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x1}, 0xa5, [0xfffffffffffffe00, 0x4, 0x101, 0x8, 0x4, 0xffffffffffffffe1, 0x6, 0xac]}, 0x5c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000f8b000-0x38)=@routing={0x32, 0x6, 0x0, 0x3f, 0x0, [@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}]}, 0x38) 2018/01/25 21:01:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000b9b000)='/dev/adsp#\x00', 0x0, 0x400041) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000aa4000)={0x0, 0x1}, &(0x7f0000116000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000a68000-0xc)={r1, 0xe949, 0x2, [0x401, 0x3]}, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000634000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000678000-0x40)=[{&(0x7f0000a09000)="83d09b3d036d0b9a91d2b1b7f7e9d51063dbfd327a58daea4b4ae9e324156022b79e100ca368135993911b862d201e5779c536048e83ed2f7c2bbcc415da977b2d56b5ee8b868b733bebc8052e0d86f5da44671a1e4aa9a31c3b05852b9d30757465e831878f510a66787bf21b3b01a92a90724d6db91d364b1da7e5805699e8b465c2909e074ab398383c7abab1073d2a", 0x91}, {&(0x7f0000fbc000-0x54)="c17e5afb8c52f7326dd73ece084ffeb52762ec86dd05baad360122ecdf49bf35b51ece442b585815ef2ef03623070c13b361f7bd28e255c3865870a958c091a207f3f1c2fef19e255459cfebb5d2fe23a0d913bd", 0x54}, {&(0x7f0000001000-0xf9)="aaeabc9d76da5c48af0e6deda3d457836034f24395e96f6977b69653157c8fbb737bdb0d2cdd78bfdc8dc353aef2d1e7cba9f4a690a8df8e77f0129d2e59989cca3de98075102e1909b0432426e509635ad02620c9eefcfbabce73352bfe9e600802286cde193c52a817ce707f55f72c6286a1ff9896271f6767daf4cf834c915435111df59fb80ece8af59a754b66f30c8c9a5d9accf85ddc10ed6d289cb695e26fb26f8d1662fb15af959b14248360f93a4587dc5992bb0808cbffdbc31b28088e846eebe183fdc4f0364cf53bed65aa60d1c06a35ae8e80f716909ab79709a537125da8e091c047e45b99432a0b4f28c4c34b4b02d02b0b", 0xf9}, {&(0x7f0000210000-0x6)="9e04c8f833bc", 0x6}], 0x4, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000acc000-0x1000)=""/4096) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000cde000-0x10)={&(0x7f00005d7000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) write$selinux_context(r0, &(0x7f000089b000)='system_u:object_r:fuse_device_t:s0\x00', 0x23) 2018/01/25 21:01:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000fd1000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000881000)={0xc, 0x0, &(0x7f0000005000-0x44)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000dc0000)=""}) r2 = syz_open_dev$mouse(&(0x7f0000095000)='/dev/input/mouse#\x00', 0x205, 0x40) ioctl$KDENABIO(r2, 0x4b36) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f000026b000-0x4)=0x4, 0x4) 2018/01/25 21:01:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x80002004, 0x0}) 2018/01/25 21:01:46 executing program 2 (fault-call:3 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {0xffffffffffffffff, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 120.544907] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.550454] binder: undelivered TRANSACTION_COMPLETE [ 120.555643] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.582005] binder: 18220:18226 got reply transaction with no transaction stack 2018/01/25 21:01:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {0xffffffffffffffff, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x7d8b52d342ece40d, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000ce7000-0x8c)={0x0, 0x8, 0x40, 'queue0\x00', 0x7fff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 120.584185] binder: 18224:18231 transaction failed 29189/-22, size 0-8 line 2788 2018/01/25 21:01:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0xffffffffffffff5b, 0x0, &(0x7f00008ba000-0x8)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x2, 0x0, &(0x7f0000658000)="fc9f"}) 2018/01/25 21:01:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00006b5000-0xd)='/selinux/mls\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x80) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000693000-0xd)=""/13) r2 = add_key(&(0x7f0000e71000-0x8)='trusted\x00', &(0x7f00008bb000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000aea000-0x1000)="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", 0x1000, 0xfffffffffffffff9) keyctl$describe(0x6, r2, &(0x7f0000a42000-0x6f)=""/111, 0x6f) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept4(r0, 0x0, &(0x7f000032c000)=0x0, 0x80000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000581000-0x11)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000fd6000-0x4)=0x17, 0x4) name_to_handle_at(r4, &(0x7f000031d000-0x8)='./file0\x00', &(0x7f00003a6000-0xd5)={0xd5, 0xfffffffbffffff01, "b1689c148f88ee2f38f1774800d892f1ed011356c4912363fd465eeb89e1e3fd3a986f19a0954770f0c07c88807e8b9c1db72a5055268fbf23b2ddb630705e3191d7dacbd5024926efaef1b138634961623f370741053172477f8f69a6812c3c6dbd1e838600f5585140762ade786c6779c728a6d47414e850064ae3a2ce468605b0f1f214c00f249dddde5f4b76258fc9edad1309dcceb3aee27980c2073af63e3e9d14696733277193ce97fb989273f6756f31ed36c3d2c82d8e3569f0f2996c40860950e42aa09fb2b615db"}, &(0x7f000013d000)=0x0, 0x400) readahead(r4, 0x1e, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00001f5000)=0x6, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0xf0, 0x0, &(0x7f0000973000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00007ef000)=[], &(0x7f000000b000-0x30)=[]}}], 0xfffffffffffffe01, 0x0, &(0x7f0000009000)=""}) setsockopt$inet6_dccp_int(r4, 0x21, 0x11, &(0x7f00009a8000)=0x1, 0x4) 2018/01/25 21:01:46 executing program 3 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) [ 120.590531] binder: 18222:18232 BC_ACQUIRE_DONE node 758 has no pending acquire request [ 120.590549] binder: 18222:18232 got reply transaction with bad transaction stack, transaction 759 has target 18222:0 [ 120.590559] binder: 18222:18232 transaction failed 29201/-71, size 0-0 line 2718 [ 120.611421] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.614182] binder: 18230:18235 BC_FREE_BUFFER u0000000000000000 no match [ 120.622158] binder: BINDER_SET_CONTEXT_MGR already set [ 120.622168] binder: 18222:18237 ioctl 40046207 0 returned -16 [ 120.624478] binder_alloc: 18222: binder_alloc_buf, no vma [ 120.624511] binder: 18222:18232 transaction failed 29189/-3, size 40-0 line 2903 [ 120.644427] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.644707] binder: release 18222:18232 transaction 759 out, still active [ 120.644713] binder: undelivered TRANSACTION_COMPLETE [ 120.644720] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.644771] binder: send failed reply for transaction 759, target dead [ 120.644911] binder: 18230:18244 BC_FREE_BUFFER u0000000000000000 no match [ 120.650306] binder: 18241:18242 transaction failed 29189/-22, size 0-8 line 2788 [ 120.654397] binder: 18220:18247 got reply transaction with no transaction stack [ 120.654407] binder: 18220:18247 transaction failed 29201/-71, size 0-439 line 2703 [ 120.677801] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.699418] binder: 18251:18254 BC_ACQUIRE_DONE node 764 has no pending acquire request [ 120.699438] binder: 18251:18254 got reply transaction with bad transaction stack, transaction 765 has target 18251:0 [ 120.699450] binder: 18251:18254 transaction failed 29201/-71, size 0-0 line 2718 [ 120.707882] binder: 18256:18259 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 120.711646] binder_alloc: 18251: binder_alloc_buf, no vma [ 120.711675] binder: 18257:18260 transaction failed 29189/-3, size 0-8 line 2903 [ 120.712984] FAULT_INJECTION: forcing a failure. [ 120.712984] name failslab, interval 1, probability 0, space 0, times 0 [ 120.712995] CPU: 0 PID: 18264 Comm: syz-executor3 Not tainted 4.15.0-rc9+ #280 [ 120.713006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.713010] Call Trace: [ 120.713031] dump_stack+0x194/0x257 [ 120.713056] ? arch_local_irq_restore+0x53/0x53 [ 120.713110] should_fail+0x8c0/0xa40 [ 120.713136] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 120.713154] ? handle_mm_fault+0x248/0x8d0 [ 120.713178] ? find_held_lock+0x35/0x1d0 [ 120.713214] ? find_held_lock+0x35/0x1d0 [ 120.713298] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 120.713322] ? rcu_note_context_switch+0x710/0x710 [ 120.713339] ? __do_page_fault+0x3d6/0xc90 [ 120.713371] should_failslab+0xec/0x120 [ 120.713389] kmem_cache_alloc+0x47/0x760 [ 120.713443] getname_flags+0xcb/0x580 [ 120.713455] ? __do_page_fault+0xc90/0xc90 [ 120.713478] getname+0x19/0x20 [ 120.713492] do_sys_open+0x2e7/0x6d0 [ 120.713524] ? filp_open+0x70/0x70 [ 120.713532] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 120.713552] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 120.713587] SyS_open+0x2d/0x40 [ 120.713607] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 120.713616] RIP: 0033:0x40d211 [ 120.713621] RSP: 002b:00007fa0b7d92780 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 120.713633] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 000000000040d211 [ 120.713639] RDX: 0000000000000000 RSI: 0000000000000c00 RDI: 00007fa0b7d92830 [ 120.713645] RBP: 0000000000000625 R08: 0000000000000000 R09: 0000000000000000 [ 120.713651] R10: 0000000020483000 R11: 0000000000000293 R12: 00000000006f8418 [ 120.713657] R13: 0000000000000014 R14: 00007fa0b7d936d4 R15: ffffffffffffffff [ 120.735365] binder: BINDER_SET_CONTEXT_MGR already set [ 120.735377] binder: 18251:18254 ioctl 40046207 0 returned -16 [ 120.736263] binder_alloc: binder_alloc_mmap_handler: 18256 20000000-20002000 already mapped failed -16 [ 120.738095] binder: 18251:18263 BC_ACQUIRE_DONE u0000000000000000 no match [ 120.738104] binder: 18251:18263 got reply transaction with no transaction stack [ 120.738112] binder: 18251:18263 transaction failed 29201/-71, size 0-0 line 2703 [ 120.740112] binder_alloc: 18251: binder_alloc_buf, no vma [ 120.740143] binder: 18257:18260 transaction failed 29189/-3, size 0-8 line 2903 [ 120.742672] binder_alloc: 18251: binder_alloc_buf, no vma [ 120.742692] binder: 18258:18262 transaction failed 29189/-3, size 0-0 line 2903 [ 120.744439] binder_alloc: 18251: binder_alloc_buf, no vma [ 120.744470] binder: 18251:18254 transaction failed 29189/-3, size 40-0 line 2903 [ 120.748147] binder: BINDER_SET_CONTEXT_MGR already set [ 120.748157] binder: 18256:18259 ioctl 40046207 0 returned -16 [ 120.768510] binder: undelivered transaction 768, process died. [ 120.788659] binder_alloc: 18251: binder_alloc_buf, no vma [ 120.788681] binder: 18258:18262 transaction failed 29189/-3, size 0-0 line 2903 [ 120.794644] binder: release 18251:18254 transaction 765 out, still active [ 120.794649] binder: undelivered TRANSACTION_COMPLETE [ 120.794656] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.794672] binder: send failed reply for transaction 765, target dead [ 120.799889] binder: undelivered TRANSACTION_ERROR: 29189 [ 120.799898] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.212037] binder: 18220:18226 transaction failed 29201/-71, size 0-439 line 2703 2018/01/25 21:01:47 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{0xffffffffffffffff, 0x58, 0x0}, {r0, 0x9014, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:47 executing program 3 (fault-call:2 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = socket(0xb, 0x3, 0x3) bind$bt_l2cap(r1, &(0x7f0000cee000-0xe)={0x1f, 0xfffffffffffffcce, {0x9, 0x5, 0xfffffffffffffcfb, 0x8, 0xcc, 0x3}, 0x6, 0xfffffffffffffff9}, 0xe) 2018/01/25 21:01:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f00001a4000)='/dev/usbmon#\x00', 0x6, 0x200200) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000d29000-0xc)={@empty=0x0, @loopback=0x0, @empty=0x0}, &(0x7f000096c000)=0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000c40000)=[{{&(0x7f0000652000-0x6)=@hci={0x1f, 0x1, 0x2}, 0x6, &(0x7f0000c53000-0x40)=[{&(0x7f0000a98000-0xee)="4ef001d02f4ba86fc2474f3d0229a140483e47c1c6e70be4a77ed7c737bc6aed53de0dd34cd58e7ed030dfea8e924c6c3e5f743040f0bdee30563b025d7d17acb00c4db049096ce26d3bc954d811929f956a3cb446fd9c36f8e6abdfb24bcb9b6f726f109fa4712937a66d3c7169abeaac7e076ddca8d1d5e179a8f843a1b13291d3e39f17a280a6b769fad3f74977c4482a597afd2284c317e841b5577985a9bbc373c35e4c3c733af5a4c41a31f037f6250f8c483c9f4f3c054623b9de82a8dabe07ad237050563287c1f5d4095f621474950e3913f0808824c3ac8ecf4521c4a004fcf2c4437f51bae11c829c", 0xee}, {&(0x7f0000c60000-0x8d)="f4805fe60baf6dffbce84d7537ea8f72e7a51135ef5283135eacb47393a7c11f0f07ba12cd7d23fe40b150abb6cc6c42b23eae47aa944e7bf1f8373c06e73d5c4c380ac7dd7f7da325606622d5a1ddf17d6e1e647634390e3295adda92866bb28cae55a4c4d8cbe2595fdf37e550fb8645c70573b05c5081809d5f3648d81946fc8d32b7ae438cb2ecc48f0896", 0x8d}, {&(0x7f0000522000-0x27)="29e1ed0e22348a932d4c9dc77659f6eca5d7d18c2951f8859d7adbb35620cdefa7ee46b99c07da", 0x27}, {&(0x7f0000807000)="db58ccaafb75fa517f421931e98bc77f821a79af581ed448d6c6a2802980e219441f2de31a0ebc5f47658bc45617d184f7cd96229b60119c1759df5183f3c7a94c8c781400b557a24440ff12bc6014ba395790ca943a48f8561a633c458ef8614f", 0x61}], 0x4, &(0x7f000012f000-0x11d8)=[{0x1010, 0x18d, 0x3, "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"}, {0x50, 0x88, 0x60, "8cde6a690b214dcd369edde584460a7b34ce4d6b64360d5a64b5dd72a48b921838c09137e64b506c7027b36c24b13edc41ae14b01239db48caeb9e"}, {0x80, 0x103, 0x80000000, "9247f497bb2e66a4498b4b5f334ba522b9a7613147fc6aadf09e486b9521826c8beffdad27f462ad7513377506f9f5afc08e534d17e1c9f2f74a707a8fa20c48c595d1ee292d481ed1d9d5cdbba1a961796f6862f91e18024cb28eb0a13c950e8c49e9b1b2b8c446b9"}, {0x50, 0x29, 0x4, "467b990c1066f0bb949d761d2dd0a8373c925d65e15589aabac988df785cc786a6bdae0e582a7a3144779fe630d7037b189a05927572d1b19e0dc54704"}, {0xa8, 0x18f, 0x6, "3662d4db1a4c3dcbbf3ed96bde59318518a6c1a5dcc8f1b8bc07c0180c4cba4356efe92310f9f154454f3fae11b2f784b21c59cbfccb15f64489280b366e4562b94eeb9f0e75aa49db0dad8499abfedf524407d232805dd6d654f2a20c2068fe2dbbeb13623b6542160b6b82aef283167626322678ef62538167324e2730f0f2bd69e0b4c7f473550a8f08842301118aeb"}], 0x11d8, 0x20000000}, 0xffe0000000000000}, {{&(0x7f00002d9000)=@rc={0x1f, {0x1, 0xef6, 0xecd4, 0x7fe000000000, 0x7fffffff, 0x1000}, 0x5}, 0x9, &(0x7f0000183000)=[{&(0x7f000003f000)="050f87754876ced21a08deba7a5190896a88e0d226bf22afa75eb8de71c7155c0b6a9e1bbd544a1bb2ea6e513908835ed4bfeb40b723eeaed2c6e9bd94fda804b39fc994b34060eb22453fbea4d7cada6bafac4f42de35aafcb1b722643b26f3a05b78ccb8b324f28ede61e48eae4f84f423e7275834abbaf70742106bae34c4b03ddf00edb967493962031509019f123e711065e21ce0cf26705a8ccd353b164fc83fae09cda823a4423f2a6a62c792a34d2c5b8605bf4373fd3be0032b99b1aba0662bc19b61382f2f7ec167f37dc0c482f5f846d4aaf6e827c8c2acba88bf4a5b732d1e55bbae3e927c766a7f7d883e7ae082c3550d65c1", 0xf9}, {&(0x7f000007d000)="7a2e8abcc7e3aa8d3e87230d7a160329e53acbf338b4bd6647a7a7e7c48063dccb00f1cd82feea290cd53d5800f47380535f45bc1c56e0030ec9c3cfba7beb9bd9c0a44f59f8511e13aa43703d07eb64a6df4046fd2e7508c90ba5eccd1f37009e5180295dbaa86c5866ef73509e533b3fa20b3b610a422b85d5909ca3a9e9392601f2d714c43337effe5944fcd347cd8310dffc7babc02c92d3289394892eb0c345ef0663c922e9ddf9dc732b9de3bc1f5f2649ba94f3590d57345639c4dd86bb928e", 0xc3}, {&(0x7f00001e2000)="2dca7ae1429e9a511638c0214baf06cf", 0x10}], 0x3, 0x0, 0x0, 0x40}, 0x520a61be}], 0x2, 0x40000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f000049c000-0x4)=0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r2 = syz_open_dev$vcsn(&(0x7f000024f000-0xa)='/dev/vcs#\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f000089c000)=""/246) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:47 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000d3e000-0x2)={0x6, 0x10000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000060000-0x30)={0x2eb, 0x0, &(0x7f0000d89000)=[], 0x46, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000b11000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:47 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{0xffffffffffffffff, 0x58, 0x0}, {r0, 0x9014, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:47 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 121.223309] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.228810] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.247543] binder: 18273:18276 transaction failed 29189/-22, size 0-8 line 2788 2018/01/25 21:01:47 executing program 3 (fault-call:2 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x40) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000029000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000d61000-0x4)=0xc) getgroups(0x8, &(0x7f0000fa9000)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f0000ea8000)='./file0\x00', &(0x7f0000ced000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000a36000-0x8)='./file0\x00', &(0x7f0000337000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f000092a000-0x4)=0x0, &(0x7f00005a7000-0x4)=0x0, &(0x7f0000916000)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000142000-0x8c)={0x8, 0x8, 0x8, 'queue1\x00', 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = getgid() r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000491000)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00001c0000-0x16)={0x0, 0x80, 0x7, [0x10001, 0x7, 0x3, 0x5, 0x8, 0x4, 0x100000001]}, &(0x7f0000298000)=0x16) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f000002a000-0x10)={r8, 0x3c, &(0x7f0000eaf000-0x3c)=[@in={0x2, 0x3, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xf}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100000001}]}, &(0x7f00008e6000)=0x10) r9 = getgid() getgroups(0xa, &(0x7f0000887000)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r11 = getegid() getgroups(0x9, &(0x7f0000efc000)=[r1, r2, r3, r4, r5, r6, r9, r10, r11]) r12 = getegid() setgid(r12) r13 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000e5c000-0x9)='/dev/ppp\x00', 0x1003d, 0x0) recvfrom$unix(r14, &(0x7f000005b000-0xa4)=""/164, 0xa4, 0x2000, &(0x7f0000e7c000)=@abs={0x1, 0x0, 0x3}, 0x7) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$VHOST_SET_VRING_ERR(r14, 0x4008af22, &(0x7f0000d35000)={0x3, r14}) 2018/01/25 21:01:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00002ff000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f000035f000)={0x10, 0x0, 0x0, 0x20010}, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000719000)='/dev/input/mice\x00', 0x0, 0x8800) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000943000-0x4)=0x0, 0x4) r3 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f000007d000)={&(0x7f0000455000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f000002f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000d6c000-0x4)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00004b1000-0xb0)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x16, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @register_looper={0x630b}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:47 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{0xffffffffffffffff, 0x58, 0x0}, {r0, 0x9014, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:47 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000114000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000a8b000-0x20)={0x1ff, 0x3, 0x6000, 0x2000, &(0x7f0000ab0000/0x2000)=nil}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f00004e5000)={0x8}, 0x8, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000ea7000)=""/77, &(0x7f0000ab0000-0x4)=0x4d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 121.247991] binder: 18268:18274 transaction failed 29189/-22, size 0-8 line 2788 [ 121.254663] binder: 18275:18278 unknown command 0 [ 121.254671] binder: 18275:18278 ioctl c0306201 2005ffd0 returned -22 [ 121.262302] binder: 18269:18280 ERROR: BC_REGISTER_LOOPER called without request [ 121.263250] binder: 18269:18280 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 121.268350] binder: 18275:18278 unknown command 0 [ 121.268361] binder: 18275:18278 ioctl c0306201 2005ffd0 returned -22 [ 121.279358] FAULT_INJECTION: forcing a failure. [ 121.279358] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 121.279369] CPU: 0 PID: 18282 Comm: syz-executor3 Not tainted 4.15.0-rc9+ #280 [ 121.279373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.279377] Call Trace: [ 121.279395] dump_stack+0x194/0x257 [ 121.279414] ? arch_local_irq_restore+0x53/0x53 [ 121.279444] should_fail+0x8c0/0xa40 [ 121.279462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 121.279481] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 121.279491] ? perf_trace_lock+0xd6/0x900 [ 121.279517] ? do_raw_spin_trylock+0x190/0x190 [ 121.279541] ? perf_trace_lock+0xd6/0x900 [ 121.279569] ? perf_trace_lock+0xd6/0x900 [ 121.279585] ? check_noncircular+0x20/0x20 [ 121.279602] ? trace_event_raw_event_lock+0x340/0x340 [ 121.279622] ? should_fail+0x23b/0xa40 [ 121.279654] __alloc_pages_nodemask+0x338/0xd80 [ 121.279679] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 121.279701] ? find_held_lock+0x35/0x1d0 [ 121.279773] ? rcu_note_context_switch+0x710/0x710 [ 121.279792] cache_grow_begin+0x72/0x3f0 [ 121.279813] kmem_cache_alloc+0x400/0x760 [ 121.279854] getname_flags+0xcb/0x580 [ 121.279870] ? __do_page_fault+0xc90/0xc90 [ 121.279887] getname+0x19/0x20 [ 121.279901] do_sys_open+0x2e7/0x6d0 [ 121.279924] ? filp_open+0x70/0x70 [ 121.279932] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 121.279947] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 121.279969] SyS_open+0x2d/0x40 [ 121.279983] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 121.279990] RIP: 0033:0x40d211 [ 121.279995] RSP: 002b:00007fa0b7d92780 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 121.280008] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 000000000040d211 [ 121.280014] RDX: 0000000000000000 RSI: 0000000000000c00 RDI: 00007fa0b7d92830 [ 121.280020] RBP: 0000000000000625 R08: 0000000000000000 R09: 0000000000000000 [ 121.280026] R10: 0000000020483000 R11: 0000000000000293 R12: 00000000006f8418 [ 121.280033] R13: 0000000000000013 R14: 00007fa0b7d936d4 R15: ffffffffffffffff [ 121.280724] binder_alloc: binder_alloc_mmap_handler: 18269 20000000-20002000 already mapped failed -16 [ 121.286051] binder: 18272:18281 BC_ACQUIRE_DONE node 779 has no pending acquire request [ 121.286070] binder: 18272:18281 got reply transaction with bad transaction stack, transaction 780 has target 18272:0 [ 121.286082] binder: 18272:18281 transaction failed 29201/-71, size 0-0 line 2718 [ 121.296929] binder: 18269:18289 ERROR: BC_REGISTER_LOOPER called without request [ 121.297992] binder: BINDER_SET_CONTEXT_MGR already set [ 121.298005] binder: 18269:18280 ioctl 40046207 0 returned -16 [ 121.309954] binder: release 18279:18284 transaction 781 out, still active [ 121.309960] binder: undelivered TRANSACTION_COMPLETE [ 121.312590] binder: 18268:18274 got transaction with invalid offset (0, min 0 max 0) or object. [ 121.312631] binder: 18268:18274 transaction failed 29201/-22, size 0-8 line 2966 [ 121.319101] binder: 18268:18288 BC_ACQUIRE_DONE u0000000000000000 no match [ 121.319114] binder: 18268:18288 got reply transaction with no transaction stack [ 121.319124] binder: 18268:18288 transaction failed 29201/-71, size 0-0 line 2703 [ 121.337363] binder: undelivered transaction 778, process died. [ 121.338357] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.338368] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.338555] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.344933] binder: BINDER_SET_CONTEXT_MGR already set [ 121.344945] binder: 18272:18281 ioctl 40046207 0 returned -16 [ 121.345057] binder_alloc: 18272: binder_alloc_buf, no vma [ 121.345084] binder: 18272:18299 transaction failed 29189/-3, size 40-0 line 2903 [ 121.348888] FAULT_INJECTION: forcing a failure. [ 121.348888] name failslab, interval 1, probability 0, space 0, times 0 [ 121.348901] CPU: 0 PID: 18297 Comm: syz-executor3 Not tainted 4.15.0-rc9+ #280 [ 121.348907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.348911] Call Trace: [ 121.348931] dump_stack+0x194/0x257 [ 121.348953] ? arch_local_irq_restore+0x53/0x53 [ 121.349007] should_fail+0x8c0/0xa40 [ 121.349035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 121.349057] ? perf_trace_lock+0x4d6/0x900 [ 121.349110] ? find_held_lock+0x35/0x1d0 [ 121.349193] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 121.349215] ? rcu_note_context_switch+0x710/0x710 [ 121.349256] should_failslab+0xec/0x120 [ 121.349272] kmem_cache_alloc+0x47/0x760 [ 121.349290] ? perf_trace_lock+0x4d6/0x900 [ 121.349327] get_empty_filp+0xfb/0x4f0 [ 121.349343] ? proc_nr_files+0x60/0x60 [ 121.349364] ? check_noncircular+0x20/0x20 [ 121.349382] ? __lock_is_held+0xb6/0x140 [ 121.349418] ? unwind_get_return_address+0x61/0xa0 [ 121.349451] path_openat+0xed/0x3530 [ 121.349509] ? path_lookupat+0xba0/0xba0 [ 121.349523] ? lock_downgrade+0x980/0x980 [ 121.349530] ? do_sys_open+0x2e7/0x6d0 [ 121.349551] ? lock_release+0xa40/0xa40 [ 121.349569] ? find_held_lock+0x35/0x1d0 [ 121.349586] ? do_raw_spin_trylock+0x190/0x190 [ 121.349599] ? __lock_is_held+0xb6/0x140 [ 121.349613] ? _find_next_bit+0xee/0x120 [ 121.349646] ? _raw_spin_unlock+0x22/0x30 [ 121.349659] ? __alloc_fd+0x29b/0x750 [ 121.349711] do_filp_open+0x25b/0x3b0 [ 121.349731] ? may_open_dev+0xe0/0xe0 [ 121.349744] ? strncpy_from_user+0x323/0x430 [ 121.349777] ? mpi_resize+0x200/0x200 [ 121.349806] ? get_unused_fd_flags+0x121/0x190 [ 121.349829] ? getname_flags+0x256/0x580 [ 121.349883] do_sys_open+0x502/0x6d0 [ 121.349891] ? do_sys_open+0x502/0x6d0 [ 121.349921] ? filp_open+0x70/0x70 [ 121.349929] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 121.349948] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 121.349980] SyS_open+0x2d/0x40 [ 121.349999] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 121.350007] RIP: 0033:0x40d211 [ 121.350012] RSP: 002b:00007fa0b7d92780 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 121.350022] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 000000000040d211 [ 121.350028] RDX: 0000000000000000 RSI: 0000000000000c00 RDI: 00007fa0b7d92830 [ 121.350034] RBP: 0000000000000625 R08: 0000000000000000 R09: 0000000000000000 [ 121.350039] R10: 0000000020483000 R11: 0000000000000293 R12: 00000000006f8418 [ 121.350044] R13: 0000000000000014 R14: 00007fa0b7d936d4 R15: ffffffffffffffff [ 121.366931] audit: type=1400 audit(1516914107.413:704): avc: denied { setgid } for pid=18302 comm="syz-executor5" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 121.368394] binder_alloc: 18272: binder_alloc_buf, no vma [ 121.368418] binder: 18302:18303 transaction failed 29189/-3, size 0-0 line 2903 [ 121.369583] binder: 18292:18308 got reply transaction with no transaction stack [ 121.369591] binder: 18292:18308 transaction failed 29201/-71, size 0-0 line 2703 [ 121.374619] binder_alloc: 18272: binder_alloc_buf, no vma [ 121.374651] binder: 18306:18310 transaction failed 29189/-3, size 0-8 line 2903 [ 121.380201] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.380621] binder: release 18272:18281 transaction 780 out, still active [ 121.380625] binder: undelivered TRANSACTION_COMPLETE [ 121.380633] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.380653] binder: send failed reply for transaction 780, target dead [ 121.380693] binder: send failed reply for transaction 781, target dead [ 121.383550] binder: 18305:18309 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 121.383556] binder: 18305:18309 unknown command 0 [ 121.383563] binder: 18305:18309 ioctl c0306201 209effd0 returned -22 [ 121.394366] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.402231] binder: 18306:18313 transaction failed 29189/-22, size 0-8 line 2788 [ 121.411612] binder: 18306:18310 BC_ACQUIRE_DONE u0000000000000000 no match [ 121.411625] binder: 18306:18310 got reply transaction with no transaction stack [ 121.411635] binder: 18306:18310 transaction failed 29201/-71, size 0-0 line 2703 [ 121.419078] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.419090] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.419231] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.419384] binder: BINDER_SET_CONTEXT_MGR already set [ 121.419393] binder: 18305:18314 ioctl 40046207 0 returned -16 [ 121.424624] binder_alloc: 18305: binder_alloc_buf, no vma 2018/01/25 21:01:48 executing program 3 (fault-call:2 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000def000-0x12)='/dev/snd/pcmC#D#p\x00', 0xb1, 0x80) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00005ca000-0xc4)=""/196, &(0x7f0000796000)=0xc4) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:48 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8000, 0x8300) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = gettid() mmap(&(0x7f0000000000/0xf91000)=nil, 0xf91000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x24000000000003, 0x9) setsockopt(r3, 0xff, 0x0, &(0x7f0000f91000-0xb9)="", 0x0) ptrace$poke(0x4, r2, &(0x7f0000dc1000-0x8)=0x0, 0xe87a) syz_open_dev$admmidi(&(0x7f0000f60000-0xe)='/dev/admmidi#\x00', 0x8, 0x0) fchmodat(r0, &(0x7f0000d1f000)='./file0\x00', 0x88) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f000032c000)="e19481d09136ba", 0x7) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000e04000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x8000}) bind$unix(r0, &(0x7f0000dbe000-0x8)=@abs={0x0, 0x0, 0x3}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000e96000-0x18)={0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f000041f000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000e25000-0x30)={0x34, 0x0, &(0x7f0000961000)=[@free_buffer={0x40086303, 0x0}, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r4}, @exit_looper={0x630d}, @acquire={0x40046305, 0x4}, @increfs={0x40046304, 0x2}], 0xa1, 0x0, &(0x7f0000dc1000-0xa1)="0c3f68754453857da1c0a7f680c318d7cfabbd463f93275b8909ad8af47e9f9b7eee6474e6f6a2238c2e927515a59e917663e3c154b9405c8f3666cfa0ee418ed55b9cde4877e43c889e4874656d26292ca1399d4f6e5e73c3d0404132bca4cd37d9f79e64c1e9fb4032d7eab711ace8d03c19794322d536e0a2ecc0db13fd4ec7abdf2aee950806276d631e0151232eaa553300a36982bc253bab2e17c78f8199"}) 2018/01/25 21:01:48 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x3) r1 = syz_open_dev$vcsn(&(0x7f0000bf6000-0xa)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x0) r2 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f93000)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000733000)='/dev/admmidi#\x00', 0x200, 0x10800) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000a8a000)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:48 executing program 1: timerfd_create(0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00003fe000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fchdir(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000e61000)="03"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) [ 121.424655] binder: 18305:18309 transaction failed 29189/-3, size 22-0 line 2903 [ 121.426582] binder: 18302:18312 transaction failed 29189/-22, size 0-0 line 2788 [ 121.436168] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.437000] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.996256] binder: undelivered TRANSACTION_COMPLETE [ 121.996284] binder: undelivered transaction 790, process died. [ 122.233519] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:48 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:48 executing program 3 (fault-call:2 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = syz_open_dev$vcsa(&(0x7f0000c5e000)='/dev/vcsa#\x00', 0x1, 0x40) ioctl$TIOCCONS(r1, 0x541d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 122.262595] binder: 18319:18321 ioctl 5473 20a8a000 returned -22 [ 122.263570] FAULT_INJECTION: forcing a failure. [ 122.263570] name failslab, interval 1, probability 0, space 0, times 0 2018/01/25 21:01:48 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f000094c000)='/dev/rfkill\x00', 0x200, 0x0) bind(r0, &(0x7f0000fa6000-0x26)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x14}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x4, 0x3, 0x4}}, 0x26) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000217000)={0x20, 0x7ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000947000-0x11)='/selinux/enforce\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000e0a000)={0x859, 0x1, {0xffffffffffffffff, 0x3, 0x8acf, 0x2, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$binder(&(0x7f00002f2000)='/dev/binder#\x00', 0x0, 0xffdffffffffffff9) timerfd_create(0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000017b000-0xc)={0x0, @multicast2=0x0, @loopback=0x0}, &(0x7f0000975000)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00007f6000)={@generic="170d3cc834f60b1f3322b6ba3e078fd7", r4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:48 executing program 3 (fault-call:2 fault-nth:5): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000083c000-0x11)='/selinux/enforce\x00', 0x10440, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000b7a000-0x4)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) [ 122.263581] CPU: 0 PID: 18323 Comm: syz-executor3 Not tainted 4.15.0-rc9+ #280 [ 122.263587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.263591] Call Trace: [ 122.263609] dump_stack+0x194/0x257 [ 122.263632] ? arch_local_irq_restore+0x53/0x53 [ 122.263681] should_fail+0x8c0/0xa40 2018/01/25 21:01:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000cd7000-0xb)='/dev/adsp#\x00', 0x1f, 0x20000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f000071e000-0xc)={&(0x7f00008b9000)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000e2a000)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000f5b000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00004e4000)={r2, r3, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ftruncate(r1, 0x20) writev(r1, &(0x7f0000ba3000-0x60)=[{&(0x7f0000adf000)="db0d4f7fc0520a86f369537823f214fa69f81ef6a00dc0fadcc732e61562a7e1f6a22d18a619625f1fd4f0a64ad709d1c305cf5d5889d0d046a141686af895aaf5c114bf8a1e2a61bd61682b4a99eb6d21b000a113eaced5583803a7c929d5239bce3617980e79f6cc79f989f3a3e4996050ff05a6223721e05baa62c1133a6f70e51bc9c0b781561442d97984499a09c6a745ea1407d3a450978a83463a9a29ad3ff5fa59785daab726c71286700e7c070623b646f3e3651232d4054c9885b6a88dbb3406bc4bdd46aa8c96d634b32d59fe86", 0xd3}, {&(0x7f0000494000+0xe0b)="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", 0x1000}, {&(0x7f000073a000)="5d41733a89c17ed8a16a3852dee7e7fddb94a2cb1fc399a704433d173790cabf3ce40bad6e2bc1a832900d0539bba1c1a8df0bdf0bf012f045230673bb25537d9fa06791e0a03efd7400cad233493f671bd9c3c78b62a38da43df6bcaef996a7", 0x60}, {&(0x7f0000a55000)="c8ed9a9b993713dd05bd1f8b7516d2ed57e6de30dde2e6e61a251e8bdd454bfca578a3b0057928248088636bfed1cabf1f03b684469cfdf6ac10a8e148412c29724a38dc667567a12447c9b97c2876fb9ec1cee7a952093d02f548134cc9e1a415115e0071c8033ea334ba9784915345c7425fd1", 0x74}, {&(0x7f0000c94000)="71d12685786773dfc650052021d9322b7a6c4da6d93c0c92588ecf93e75b7c55c7c14fc97b35f76f4f1a9bb70d89bc6505cc500285ad7f6ba5ca8b0aec2e3fa3bce4184124e98e24ae68acca05308b871560a6ab1176f052f7d0a3dba8f68c864d7a4b5de2f8472c9ab4d6aced38e02a8eef6f02fbcf0fcc01a96e1a4a52d4d5e2039d7a21e7343d5bc1af57761e22e0482100642e2af1159f118ed726470125efe559379390cbc5d40a5be3c8434d5c15e23a295b60cdeff4a6c2e90527893926e59c3a8a5ebdc43b0951b9e737a2500e046ba52ababba1", 0xd8}, {&(0x7f0000eea000)="a9863ec128c6743b07f7cf9253308d531b806aa55a329c1f0211926a2bd713390abc85234641c214c8b93fb37393a24de40526ee69615f4019a3d9a874fe67dd", 0x40}], 0x6) shmget(0x3, 0x3000, 0xd0, &(0x7f00008fd000/0x3000)=nil) [ 122.263705] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 122.263728] ? save_stack+0xa3/0xd0 [ 122.263743] ? save_stack+0x43/0xd0 [ 122.263750] ? kasan_kmalloc+0xad/0xe0 [ 122.263757] ? kasan_slab_alloc+0x12/0x20 [ 122.263764] ? kmem_cache_alloc+0x12e/0x760 [ 122.263773] ? get_empty_filp+0xfb/0x4f0 [ 122.263781] ? path_openat+0xed/0x3530 [ 122.263787] ? do_filp_open+0x25b/0x3b0 [ 122.263817] ? find_held_lock+0x35/0x1d0 [ 122.263909] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 122.263935] ? rcu_note_context_switch+0x710/0x710 [ 122.263980] should_failslab+0xec/0x120 [ 122.263997] kmem_cache_alloc+0x47/0x760 [ 122.264027] ? rcu_read_lock_sched_held+0x108/0x120 [ 122.264055] selinux_file_alloc_security+0xae/0x190 [ 122.264075] security_file_alloc+0x6d/0xa0 [ 122.264097] get_empty_filp+0x189/0x4f0 [ 122.264113] ? proc_nr_files+0x60/0x60 [ 122.264134] ? check_noncircular+0x20/0x20 [ 122.264153] ? __lock_is_held+0xb6/0x140 [ 122.264188] ? unwind_get_return_address+0x61/0xa0 [ 122.264221] path_openat+0xed/0x3530 [ 122.264278] ? path_lookupat+0xba0/0xba0 [ 122.264291] ? lock_downgrade+0x980/0x980 [ 122.264299] ? do_sys_open+0x2e7/0x6d0 [ 122.264320] ? lock_release+0xa40/0xa40 [ 122.264338] ? find_held_lock+0x35/0x1d0 [ 122.264355] ? do_raw_spin_trylock+0x190/0x190 [ 122.264368] ? __lock_is_held+0xb6/0x140 [ 122.264382] ? _find_next_bit+0xee/0x120 [ 122.264415] ? _raw_spin_unlock+0x22/0x30 [ 122.264428] ? __alloc_fd+0x29b/0x750 [ 122.264481] do_filp_open+0x25b/0x3b0 [ 122.264498] ? may_open_dev+0xe0/0xe0 [ 122.264512] ? strncpy_from_user+0x323/0x430 [ 122.264546] ? mpi_resize+0x200/0x200 [ 122.264575] ? get_unused_fd_flags+0x121/0x190 [ 122.264598] ? getname_flags+0x256/0x580 [ 122.264636] do_sys_open+0x502/0x6d0 [ 122.264643] ? do_sys_open+0x502/0x6d0 [ 122.264672] ? filp_open+0x70/0x70 [ 122.264679] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 122.264699] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 122.264732] SyS_open+0x2d/0x40 [ 122.264750] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 122.264757] RIP: 0033:0x40d211 [ 122.264762] RSP: 002b:00007fa0b7d92780 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 122.264773] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 000000000040d211 [ 122.264778] RDX: 0000000000000000 RSI: 0000000000000c00 RDI: 00007fa0b7d92830 [ 122.264783] RBP: 0000000000000625 R08: 0000000000000000 R09: 0000000000000000 [ 122.264789] R10: 0000000020483000 R11: 0000000000000293 R12: 00000000006f8418 [ 122.264795] R13: 0000000000000014 R14: 00007fa0b7d936d4 R15: ffffffffffffffff [ 122.271865] binder: 18320:18329 got reply transaction with no transaction stack [ 122.271875] binder: 18320:18329 transaction failed 29201/-71, size 0-0 line 2703 [ 122.276544] binder: 18322:18326 got transaction with invalid offset (0, min 0 max 0) or object. [ 122.276921] binder: 18322:18326 transaction failed 29201/-22, size 0-8 line 2966 [ 122.277148] binder: 18318:18328 BC_ACQUIRE_DONE node 796 has no pending acquire request [ 122.277166] binder: 18318:18328 got reply transaction with bad transaction stack, transaction 797 has target 18318:0 [ 122.277176] binder: 18318:18328 transaction failed 29201/-71, size 0-0 line 2718 [ 122.284535] binder: 18316:18327 ERROR: BC_REGISTER_LOOPER called without request [ 122.284546] binder: 18327 RLIMIT_NICE not set [ 122.293925] binder_alloc: 18318: binder_alloc_buf, no vma [ 122.293948] binder: 18319:18332 transaction failed 29189/-3, size 0-8 line 2903 [ 122.301722] binder_alloc: 18318: binder_alloc_buf, no vma [ 122.301744] binder: 18324:18330 transaction failed 29189/-3, size 0-0 line 2903 [ 122.306339] binder: 18320:18329 got reply transaction with no transaction stack [ 122.306348] binder: 18320:18329 transaction failed 29201/-71, size 0-0 line 2703 [ 122.306445] binder_alloc: binder_alloc_mmap_handler: 18318 20000000-20002000 already mapped failed -16 [ 122.309899] binder: BINDER_SET_CONTEXT_MGR already set [ 122.309910] binder: 18318:18328 ioctl 40046207 0 returned -16 [ 122.310658] binder_alloc: 18318: binder_alloc_buf, no vma [ 122.310681] binder: 18324:18339 transaction failed 29189/-3, size 0-0 line 2903 [ 122.310851] binder: 18316:18338 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 122.311064] binder_alloc: 18318: binder_alloc_buf, no vma [ 122.311088] binder: 18318:18335 transaction failed 29189/-3, size 40-0 line 2903 [ 122.314611] FAULT_INJECTION: forcing a failure. [ 122.314611] name failslab, interval 1, probability 0, space 0, times 0 [ 122.314621] CPU: 1 PID: 18340 Comm: syz-executor3 Not tainted 4.15.0-rc9+ #280 [ 122.314626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.314629] Call Trace: [ 122.314646] dump_stack+0x194/0x257 [ 122.314663] ? arch_local_irq_restore+0x53/0x53 [ 122.314671] ? __lock_acquire+0x664/0x3e00 [ 122.314701] should_fail+0x8c0/0xa40 [ 122.314718] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 122.314740] ? lock_release+0xa40/0xa40 [ 122.314756] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 122.314773] ? perf_trace_lock+0xd6/0x900 [ 122.314790] ? find_held_lock+0x35/0x1d0 [ 122.314841] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 122.314858] ? rcu_note_context_switch+0x710/0x710 [ 122.314886] should_failslab+0xec/0x120 [ 122.314898] kmem_cache_alloc_trace+0x4b/0x750 [ 122.314910] ? snd_lookup_minor_data+0x9f/0x150 [ 122.314922] ? lock_downgrade+0x980/0x980 [ 122.314942] snd_card_file_add+0xaa/0x410 [ 122.314957] ? snd_component_add+0x150/0x150 [ 122.314964] ? check_noncircular+0x20/0x20 [ 122.314983] ? lock_release+0xa40/0xa40 [ 122.315006] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 122.315030] snd_pcm_open+0xc7/0x8b0 [ 122.315039] ? wait_for_completion+0x770/0x770 [ 122.315048] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 122.315073] ? snd_pcm_open_substream+0x3b0/0x3b0 [ 122.315087] ? refcount_inc_not_zero+0xfe/0x180 [ 122.315098] ? refcount_add+0x60/0x60 [ 122.315108] ? chrdev_open+0xdf/0x730 [ 122.315120] ? lock_downgrade+0x980/0x980 [ 122.315140] ? refcount_inc+0x1e/0x50 [ 122.315167] snd_pcm_capture_open+0x81/0xe0 [ 122.315174] ? snd_pcm_open+0x8b0/0x8b0 [ 122.315185] snd_open+0x1fa/0x3f0 [ 122.315199] ? snd_request_card+0x50/0x50 [ 122.315207] chrdev_open+0x257/0x730 [ 122.315225] ? cdev_put.part.1+0x50/0x50 [ 122.315232] ? fsnotify_first_mark+0x2b0/0x2b0 [ 122.315252] ? _copy_to_user+0xc0/0xc0 [ 122.315276] ? security_file_open+0x89/0x190 [ 122.315292] do_dentry_open+0x667/0xd40 [ 122.315305] ? cdev_put.part.1+0x50/0x50 [ 122.315336] vfs_open+0x107/0x220 [ 122.315359] path_openat+0x1151/0x3530 [ 122.315395] ? path_lookupat+0xba0/0xba0 [ 122.315405] ? lock_downgrade+0x980/0x980 [ 122.315412] ? do_sys_open+0x2e7/0x6d0 [ 122.315434] ? find_held_lock+0x35/0x1d0 [ 122.315446] ? do_raw_spin_trylock+0x190/0x190 [ 122.315456] ? __lock_is_held+0xb6/0x140 [ 122.315466] ? _find_next_bit+0xee/0x120 [ 122.315487] ? _raw_spin_unlock+0x22/0x30 [ 122.315497] ? __alloc_fd+0x29b/0x750 [ 122.315530] do_filp_open+0x25b/0x3b0 [ 122.315543] ? may_open_dev+0xe0/0xe0 [ 122.315569] ? mpi_resize+0x200/0x200 [ 122.315588] ? get_unused_fd_flags+0x121/0x190 [ 122.315604] ? getname_flags+0x256/0x580 [ 122.315628] do_sys_open+0x502/0x6d0 [ 122.315634] ? do_sys_open+0x502/0x6d0 [ 122.315653] ? filp_open+0x70/0x70 [ 122.315660] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 122.315674] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 122.315695] SyS_open+0x2d/0x40 [ 122.315709] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 122.315715] RIP: 0033:0x40d211 [ 122.315720] RSP: 002b:00007fa0b7d92780 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 122.315728] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 000000000040d211 [ 122.315733] RDX: 0000000000000000 RSI: 0000000000000c00 RDI: 00007fa0b7d92830 [ 122.315737] RBP: 0000000000000625 R08: 0000000000000000 R09: 0000000000000000 [ 122.315742] R10: 0000000020483000 R11: 0000000000000293 R12: 00000000006f8418 [ 122.315747] R13: 0000000000000014 R14: 00007fa0b7d936d4 R15: ffffffffffffffff [ 122.323264] binder: undelivered TRANSACTION_ERROR: 29189 [ 122.323421] binder: release 18318:18328 transaction 797 out, still active [ 122.323426] binder: undelivered TRANSACTION_COMPLETE [ 122.323434] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.323454] binder: send failed reply for transaction 797, target dead [ 122.325377] binder: 18320:18334 BC_FREE_BUFFER u0000000000000000 no match [ 122.325390] binder: 18320:18334 Acquire 1 refcount change on invalid ref 2 ret -22 [ 122.325398] binder: 18320:18334 BC_FREE_BUFFER u0000000000000000 no match [ 122.325408] binder: 18320:18334 Acquire 1 refcount change on invalid ref 4 ret -22 [ 122.325418] binder: 18320:18334 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 122.327773] binder_alloc: binder_alloc_mmap_handler: 18316 20000000-20002000 already mapped failed -16 [ 122.330104] binder: undelivered TRANSACTION_ERROR: 29189 [ 122.330117] binder: undelivered TRANSACTION_ERROR: 29189 [ 122.333798] binder: 18322:18342 transaction failed 29189/-22, size 0-8 line 2788 [ 122.336850] binder: BINDER_SET_CONTEXT_MGR already set [ 122.336859] binder: 18316:18338 ioctl 40046207 0 returned -16 [ 122.338691] binder: 18316:18338 ERROR: BC_REGISTER_LOOPER called without request [ 122.338702] binder: 18338 RLIMIT_NICE not set [ 122.340492] binder: 18319:18332 ioctl 5473 20a8a000 returned -22 [ 122.340698] binder: 18319:18341 transaction failed 29189/-22, size 0-8 line 2788 [ 122.340859] binder: 18322:18345 BC_ACQUIRE_DONE u0000000000000000 no match [ 122.340868] binder: 18322:18345 got reply transaction with no transaction stack [ 122.340876] binder: 18322:18345 transaction failed 29201/-71, size 0-0 line 2703 [ 122.376484] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.392299] binder: 18353:18355 ERROR: BC_REGISTER_LOOPER called without request [ 122.395279] binder: 18353:18355 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 122.403633] binder: 18344:18358 BC_ACQUIRE_DONE node 810 has no pending acquire request [ 122.403649] binder: 18344:18358 got reply transaction with no transaction stack [ 122.403660] binder: 18344:18358 transaction failed 29201/-71, size 0-0 line 2703 [ 122.408050] binder_alloc: binder_alloc_mmap_handler: 18353 20000000-20002000 already mapped failed -16 [ 122.414470] binder: BINDER_SET_CONTEXT_MGR already set [ 122.414480] binder: 18353:18355 ioctl 40046207 0 returned -16 [ 122.419505] binder: 18356:18360 got reply transaction with no transaction stack [ 122.419513] binder: 18356:18360 transaction failed 29201/-71, size 0-0 line 2703 [ 122.420313] binder: 18353:18361 ERROR: BC_REGISTER_LOOPER called without request [ 122.427232] binder_alloc: 18353: binder_alloc_buf, no vma [ 122.427257] binder: 18353:18355 transaction failed 29189/-3, size 24-0 line 2903 [ 122.435732] binder: undelivered transaction 813, process died. [ 122.439620] binder: 18356:18360 got reply transaction with no transaction stack [ 122.439629] binder: 18356:18360 transaction failed 29201/-71, size 0-0 line 2703 [ 122.440826] binder: BINDER_SET_CONTEXT_MGR already set [ 122.440835] binder: 18344:18362 ioctl 40046207 0 returned -16 [ 122.446619] binder_alloc: 18344: binder_alloc_buf, no vma [ 122.446655] binder: 18344:18358 transaction failed 29189/-3, size 40-0 line 2903 [ 122.448047] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.453584] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.472624] binder: 18344:18364 BC_ACQUIRE_DONE u0000000000000000 no match [ 122.472635] binder: 18344:18364 got reply transaction with no transaction stack [ 122.472643] binder: 18344:18364 transaction failed 29201/-71, size 0-0 line 2703 [ 123.497107] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.505514] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.511055] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.516532] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.522230] binder: release 18344:18347 transaction 811 out, still active [ 123.529176] binder: undelivered TRANSACTION_COMPLETE [ 123.534303] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.539767] binder: send failed reply for transaction 811, target dead 2018/01/25 21:01:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0x5, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00009b5000-0x20)={0x2, 0x5, 0x1, 0x6, 0x20, 0x0, 0x8, 0x4, 0x0}, &(0x7f0000331000-0x4)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00009ea000)={r1, 0x9}, 0x8) r2 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000c05000)={&(0x7f0000697000/0x4000)=nil, 0x4000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000733000)={0x0, 0x0}) r3 = gettid() migrate_pages(r3, 0xf15, &(0x7f00009b3000-0x8)=0x1828, &(0x7f000029c000-0x8)=0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000b7c000)='/dev/vcs\x00', 0xfe72bcd85f910924, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000d59000)=""/180, &(0x7f00009c8000)=0xb4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000408000-0xc)={0x6, r0, 0x0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00004ad000)={0x0, 0x5}, &(0x7f0000ce7000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000768000)={r2, 0x1, 0x30, 0x1, 0x8}, &(0x7f000068f000)=0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00001e8000-0x10)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f000021b000)={0x0, 0x77, 0x1, [0x20]}, &(0x7f0000af7000-0x4)=0xa) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000378000-0xb)={r2, 0x295, 0xa3, 0x4, 0x3, 0x67}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000b10000)='/dev/sg#\x00', 0x5, 0x40) sendmsg$can_bcm(r3, &(0x7f0000f8e000)={&(0x7f000033a000-0x10)={0x1d, 0x0, 0x0, 0x0}, 0x10, &(0x7f000047f000)={&(0x7f00005c9000)={0x5, 0x9, 0xa9ee, {0x0, 0x0}, {0x0, 0x0}, {0x2, 0x7, 0x100, 0x200}, 0x1, @canfd={{0x1, 0x3, 0x5ee, 0x7}, 0x17, 0x3, 0x0, 0x0, "8361ae499269e7501d31f4a75e5fcc1b928cc61b9a37aef79049b77d72ca0802b55b83f1e0900e53cd3ebde04636531c210137bd6799777a5bf8178910b2b422"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00009aa000)={0x0, 0x0, 0x0, 0x1f, 0x800, 0x0, 0x0, 0x9, 0x8, "ec6faeafeca085060c119d55b2bed2a19bdd6003a3e697c465179f81ddb51a2d62578369a0dab582a2bb3b010ced69a68dbb3971c9a042bf5f0116c16051e046", "3139f8b25ae6c09e82a93bb9c9ae321eaf435e4d9ddc47285fdeaec33113743a35a588303777e81ba88a361a30513b5e8a44e98e44138cd3e8bcf637ba30a044", "d0b1a38c6a8bee1285db74cf7e9a60fa3be366694ecb6add24b9d2bd94b3e723", [0x6, 0x3]}) 2018/01/25 21:01:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00001bf000)='/dev/sg#\x00', 0xffffffff, 0x400) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = getpgrp(0x0) ptrace$getsig(0x4202, r1, 0x6, &(0x7f0000f12000-0x10)={0x0, 0x0, 0x0, 0x0}) 2018/01/25 21:01:49 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000f8f000-0x9)='/dev/vcs\x00', 0x408000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x8, [@remote={0xac, 0x14, 0x0, 0xbb}, @loopback=0x7f000001, @loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}, @empty=0x0, @broadcast=0xffffffff, @empty=0x0, @multicast1=0xe0000001]}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) creat(&(0x7f00009c1000)='./file0\x00', 0x80) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000c74000+0x999)=0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000ec9000)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) recvmmsg(r0, &(0x7f0000fef000)=[{{&(0x7f000042f000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, 0x14, &(0x7f0000b69000-0x20)=[{&(0x7f00009c2000)=""/89, 0x59}, {&(0x7f000076b000)=""/4096, 0x1000}], 0x2, &(0x7f0000059000)=""/4096, 0x1000, 0x40}, 0xd6}], 0x1, 0x2100, &(0x7f00001d5000)={0x0, 0x0}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000331000-0x10)={0x525, 0x40, 0xfff, 0x0}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f06000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) [ 123.546522] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.552049] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.560342] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.584170] binder: 18369:18372 got reply transaction with no transaction stack 2018/01/25 21:01:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2018/01/25 21:01:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000eef000-0x30)={0xfffffffffffffea0, 0x0, &(0x7f0000d6a000)=[], 0x0, 0x0, &(0x7f000063d000-0x3)="a58a9c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000351000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000850000-0x4)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000d51000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000703000)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000015c000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@rand_addr=0x8, 0x3, 0x2, 0x2, 0x7ff, 0x0, 0xa0, 0x20, 0x7f, r1, r2}, {0x9, 0x2, 0x7f, 0x5, 0x8, 0x1, 0x2fb7, 0x20a7}, {0x4, 0x6, 0x3, 0x0}, 0xae0, 0x6, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x1, 0x6c}, 0xa, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffffff, 0x0, 0x1, 0x7, 0x0, 0x8, 0x2}}, 0xe8) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000c7a000)={0x2, &(0x7f0000879000-0x8)=[{0x0, 0x0}, {0x0, 0x0}]}) 2018/01/25 21:01:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000aed000-0x7)=')nodev\x00', 0x3) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00006f3000-0x2)=0x9, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 123.594388] binder: 18367:18374 transaction failed 29189/-22, size 0-0 line 2788 [ 123.601866] binder: 18368:18377 BC_ACQUIRE_DONE node 822 has no pending acquire request [ 123.601885] binder: 18368:18377 got reply transaction with no transaction stack [ 123.601894] binder: 18368:18377 transaction failed 29201/-71, size 0-0 line 2703 2018/01/25 21:01:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00004dc000)={0x0, 0x53}) 2018/01/25 21:01:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) splice(r0, &(0x7f00007d8000-0x8)=0x0, r1, &(0x7f000087e000)=0x0, 0xfffffffffffffffb, 0xa) 2018/01/25 21:01:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) [ 123.606700] binder: 18370:18378 BC_ACQUIRE_DONE u0000000000000000 no match [ 123.606713] binder: 18370:18378 got reply transaction with no transaction stack 2018/01/25 21:01:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) [ 123.606723] binder: 18370:18378 transaction failed 29201/-71, size 0-0 line 2703 [ 123.623504] binder: 18371:18379 ERROR: BC_REGISTER_LOOPER called without request [ 123.624514] binder_alloc: 18368: binder_alloc_buf failed to map pages in userspace, no vma [ 123.624609] binder: 18373:18380 transaction failed 29189/-3, size 0-8 line 2903 [ 123.636962] binder: 18371:18379 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 123.640080] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.642101] binder: 18370:18384 BC_ACQUIRE_DONE u0000000000000000 no match [ 123.642111] binder: 18370:18384 got reply transaction with no transaction stack [ 123.642119] binder: 18370:18384 transaction failed 29201/-71, size 0-0 line 2703 [ 123.647749] binder: 18369:18382 ioctl 4c04 209aa000 returned -22 [ 123.654972] binder_alloc: binder_alloc_mmap_handler: 18371 20000000-20002000 already mapped failed -16 [ 123.664713] binder_alloc: binder_alloc_mmap_handler: 18368 20000000-20002000 already mapped failed -16 [ 123.665418] binder: BINDER_SET_CONTEXT_MGR already set [ 123.665427] binder: 18371:18389 ioctl 40046207 0 returned -16 [ 123.666619] binder: BINDER_SET_CONTEXT_MGR already set [ 123.666629] binder: 18368:18377 ioctl 40046207 0 returned -16 [ 123.667405] binder: 18368:18377 BC_ACQUIRE_DONE u0000000000000000 no match [ 123.667416] binder: 18368:18377 got reply transaction with no transaction stack [ 123.667424] binder: 18368:18377 transaction failed 29201/-71, size 0-0 line 2703 [ 123.668893] binder: 18371:18379 ERROR: BC_REGISTER_LOOPER called without request [ 123.670881] binder_alloc: 18371: binder_alloc_buf, no vma [ 123.670907] binder: 18371:18389 transaction failed 29189/-3, size 24-0 line 2903 [ 123.673567] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.673711] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.684645] binder: 18369:18387 got reply transaction with no transaction stack [ 123.684659] binder: 18369:18387 transaction failed 29201/-71, size 0-0 line 2703 [ 123.688160] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.692598] binder: undelivered transaction 827, process died. [ 123.695206] binder: 18369:18387 ioctl 4c04 209aa000 returned -22 [ 123.696877] binder_alloc: 18368: binder_alloc_buf, no vma [ 123.696900] binder: 18392:18395 transaction failed 29189/-3, size 0-0 line 2903 [ 123.696974] binder: BINDER_SET_CONTEXT_MGR already set [ 123.696981] binder: 18392:18395 ioctl 40046207 0 returned -16 [ 123.698393] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.698553] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.706245] binder: 18394:18400 BC_ACQUIRE_DONE u0000000000000000 no match [ 123.706256] binder: 18394:18400 got reply transaction with no transaction stack [ 123.706265] binder: 18394:18400 transaction failed 29201/-71, size 0-0 line 2703 [ 123.712945] binder: 18392:18395 transaction failed 29189/-22, size 0-0 line 2788 [ 123.719520] binder: 18399:18401 ERROR: BC_REGISTER_LOOPER called without request [ 123.721692] binder: 18399:18401 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 123.722684] binder_alloc: 18392: binder_alloc_buf, no vma [ 123.722716] binder: 18398:18405 transaction failed 29189/-3, size 0-8 line 2903 [ 123.722935] binder: 18399:18401 ioctl 4008af14 204dc000 returned -22 [ 123.729400] binder: 18394:18406 BC_ACQUIRE_DONE u0000000000000000 no match [ 123.729409] binder: 18394:18406 got reply transaction with no transaction stack [ 123.729417] binder: 18394:18406 transaction failed 29201/-71, size 0-0 line 2703 [ 123.731989] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.732253] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.744526] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.745782] binder_alloc: binder_alloc_mmap_handler: 18399 20000000-20002000 already mapped failed -16 [ 123.748918] binder: BINDER_SET_CONTEXT_MGR already set [ 123.748927] binder: 18399:18401 ioctl 40046207 0 returned -16 [ 123.749048] binder: 18399:18410 ERROR: BC_REGISTER_LOOPER called without request [ 123.751588] binder_alloc: 18399: binder_alloc_buf, no vma [ 123.751610] binder: 18399:18401 transaction failed 29189/-3, size 24-0 line 2903 [ 123.757156] binder: 18404:18408 BC_ACQUIRE_DONE node 841 has no pending acquire request [ 123.757170] binder: 18404:18408 got reply transaction with bad transaction stack, transaction 842 has target 18404:0 [ 123.757179] binder: 18404:18408 transaction failed 29201/-71, size 0-0 line 2718 [ 123.759507] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.772919] binder: undelivered transaction 837, process died. [ 123.780803] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.782534] binder: BINDER_SET_CONTEXT_MGR already set [ 123.782543] binder: 18404:18415 ioctl 40046207 0 returned -16 [ 123.784422] binder_alloc: 18404: binder_alloc_buf, no vma [ 123.784445] binder: 18404:18415 transaction failed 29189/-3, size 40-0 line 2903 [ 123.788272] binder: 18404:18408 BC_ACQUIRE_DONE u0000000000000000 no match [ 123.788279] binder: 18404:18408 got reply transaction with no transaction stack [ 123.788286] binder: 18404:18408 transaction failed 29201/-71, size 0-0 line 2703 [ 123.803932] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.803943] binder: undelivered TRANSACTION_ERROR: 29189 [ 123.804317] binder: release 18404:18408 transaction 842 out, still active 2018/01/25 21:01:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000243000-0x12)='/dev/input/mouse#\x00', 0x1ff, 0x40000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00007b8000)={0xa81, 0x9}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000060f000)='./file0\x00', 0x400000, 0x4) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000673000)=""/30) pipe2(&(0x7f0000a18000)={0x0, 0x0}, 0x800) r2 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) readv(r2, &(0x7f00003cd000-0x20)=[{&(0x7f0000f00000)=""/30, 0x1e}, {&(0x7f000075f000-0xf7)=""/247, 0xf7}], 0x2) 2018/01/25 21:01:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000087d000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r1 = syz_open_dev$vcsa(&(0x7f00006e2000-0xb)='/dev/vcsa#\x00', 0x33, 0x2) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000c26000-0x6)={0x2, 0x56, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000196000-0x9)='/dev/rtc\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f000087a000-0x6)={0x0, 0xffffffffffffff00}, &(0x7f0000532000-0x4)=0x6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000d89000)={0x0, 0x38, "04e128eedaf718a86c0e7a9e81af62f97c6ed728ebe2069a17d045c1e0c789f3ff98b2b626aaa1f747395be995b2ddacb018196f764704cc"}, &(0x7f0000835000-0x4)=0x40) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000e15000-0xb8)={r3, 0x3, 0x5, 0x39400, 0x59, 0x9, 0x10001, 0xcb, {r4, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x3, 0x5, 0x7, 0x3}}, &(0x7f000034f000)=0xb8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000081d000-0x12)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00004c4000-0x8)={0x8, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000271000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00003e7000-0xbc)={0x3, 0x1, 'client1\x00', 0x1, "8eb27725c60d24d1", "2bf959eb397c951795df1b4b882b91b662accc680d3f73a94948223d656b0ee3", 0x40, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/25 21:01:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:50 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000ada000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$usbmon(&(0x7f00002e0000-0xd)='/dev/usbmon#\x00', 0x1ff, 0x400000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000da0000)={@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}}, &(0x7f0000db4000-0x4)=0x8) r3 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) getcwd(&(0x7f00006a5000-0xd7)=""/215, 0xd7) msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6) 2018/01/25 21:01:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) ioctl$VT_RELDISP(r0, 0x5605) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) fcntl$dupfd(r0, 0x406, r0) 2018/01/25 21:01:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00001f3000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 123.804321] binder: undelivered TRANSACTION_COMPLETE [ 123.804328] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.804345] binder: send failed reply for transaction 842, target dead [ 124.263440] binder: 18369:18372 transaction failed 29201/-71, size 0-0 line 2703 [ 124.275815] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.281537] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/25 21:01:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00002d8000)='/dev/binder#\x00', 0xffffffffffffffff, 0x801) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) r2 = accept$ipx(0xffffffffffffffff, &(0x7f00001ce000-0x10)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f000083c000-0x4)=0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000a41000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) r3 = syz_open_dev$admmidi(&(0x7f000082d000-0xe)='/dev/admmidi#\x00', 0xfffffffffffffff7, 0x80) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000918000-0x6)=0x3) [ 124.302735] binder: 18418:18422 BC_ACQUIRE_DONE node 846 has no pending acquire request [ 124.302762] binder: 18418:18422 got reply transaction with bad transaction stack, transaction 847 has target 18418:0 [ 124.302774] binder: 18418:18422 transaction failed 29201/-71, size 0-0 line 2718 [ 124.302820] binder: 18419:18423 transaction failed 29189/-22, size 0-0 line 2788 [ 124.310514] binder: 18424:18426 transaction failed 29189/-22, size 0-8 line 2788 [ 124.330444] binder: 18420:18432 got reply transaction with no transaction stack [ 124.330455] binder: 18420:18432 transaction failed 29201/-71, size 0-0 line 2703 [ 124.334054] binder: 18421:18434 transaction failed 29189/-22, size 0-8 line 2788 [ 124.334243] binder: 18420:18439 got reply transaction with no transaction stack [ 124.334260] binder: 18420:18439 transaction failed 29201/-71, size 0-0 line 2703 [ 124.336636] binder: 18424:18426 transaction failed 29189/-22, size 0-8 line 2788 [ 124.336741] binder: 18419:18433 transaction failed 29189/-22, size 0-0 line 2788 [ 124.348246] binder: BINDER_SET_CONTEXT_MGR already set [ 124.348257] binder: 18418:18438 ioctl 40046207 0 returned -16 [ 124.351198] binder: 18418:18438 BC_ACQUIRE_DONE u0000000000000000 no match [ 124.351207] binder: 18418:18438 got reply transaction with no transaction stack [ 124.351216] binder: 18418:18438 transaction failed 29201/-71, size 0-0 line 2703 [ 124.356566] binder_alloc: 18418: binder_alloc_buf, no vma [ 124.356600] binder: 18418:18422 transaction failed 29189/-3, size 40-0 line 2903 [ 124.384813] binder: 18442:18443 ERROR: BC_REGISTER_LOOPER called without request [ 124.385614] binder: 18442:18443 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 124.393461] binder_alloc: binder_alloc_mmap_handler: 18442 20000000-20002000 already mapped failed -16 [ 124.396365] binder: 18421:18445 transaction failed 29189/-22, size 0-8 line 2788 [ 124.397269] binder: 18441:18444 got reply transaction with no transaction stack [ 124.397276] binder: 18441:18444 transaction failed 29201/-71, size 0-0 line 2703 [ 124.401495] binder: 18441:18448 got reply transaction with no transaction stack [ 124.401503] binder: 18441:18448 transaction failed 29201/-71, size 0-0 line 2703 [ 124.404082] binder: BINDER_SET_CONTEXT_MGR already set [ 124.404092] binder: 18442:18443 ioctl 40046207 0 returned -16 [ 124.407507] binder: 18442:18446 ERROR: BC_REGISTER_LOOPER called without request [ 124.409643] binder_alloc: 18442: binder_alloc_buf, no vma [ 124.409666] binder: 18442:18443 transaction failed 29189/-3, size 24-0 line 2903 [ 124.597914] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.597923] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.598107] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.598129] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.598190] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.598203] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.598256] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.598267] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.599449] binder: undelivered transaction 859, process died. [ 124.603761] binder: release 18418:18422 transaction 847 out, still active [ 124.603766] binder: undelivered TRANSACTION_COMPLETE [ 124.603776] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.603795] binder: send failed reply for transaction 847, target dead 2018/01/25 21:01:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = openat(0xffffffffffffff9c, &(0x7f0000edc000)='./file0\x00', 0x800, 0x21) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00001fb000-0x44)={{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14, {0x2, 0x3, @rand_addr=0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) 2018/01/25 21:01:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) syz_open_dev$dmmidi(&(0x7f0000694000)='/dev/dmmidi#\x00', 0x1, 0x8000) 2018/01/25 21:01:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000ae3000)={&(0x7f0000000000/0x1000)=nil, 0x3000, 0x1, 0x4, &(0x7f0000ea1000/0x3000)=nil, 0x6}) 2018/01/25 21:01:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000039000)='/dev/hwrng\x00', 0x8280, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000504000-0x4)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x1, 0x0, &(0x7f0000d3a000-0x1)="af"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchmod(r0, 0x26) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 2018/01/25 21:01:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$mouse(&(0x7f000014c000-0x12)='/dev/input/mouse#\x00', 0x6, 0x40) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00005d2000-0x4)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) [ 124.603850] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.603861] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.689168] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.694679] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) [ 124.721000] binder: 18451:18457 transaction failed 29189/-22, size 0-0 line 2788 2018/01/25 21:01:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 2018/01/25 21:01:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000624000)='/dev/sequencer2\x00', 0x1d5102, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000b8e000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000e03000-0x4)=0xb) r2 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f000067d000)={r3, 0x0, ""}, &(0x7f0000bbc000-0x4)=0x8) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f000021f000)={[{0x85, 0xa531, 0x5, 0x9, 0x7fffffff, 0x474, 0x9, 0x8, 0x5, 0x10000, 0x2, 0x78e3, 0x4}, {0xfffffffffffff153, 0x725713fd, 0x7, 0x8, 0x1, 0x9, 0x2, 0x8000, 0x6, 0x7, 0x2, 0x1, 0x200}, {0x3, 0x80000001, 0x5833, 0x1, 0x6, 0x10, 0x0, 0x5, 0x1, 0x7133, 0x0, 0x1, 0xe6e8}], 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/25 21:01:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) r2 = syz_open_dev$usbmon(&(0x7f0000fbe000)='/dev/usbmon#\x00', 0x4, 0x400) utimensat(r2, &(0x7f00005f0000+0x1ce)='./file0\x00', &(0x7f0000326000)={{0x0, 0x0}, {0x77359400, 0x0}}, 0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$FIONREAD(r0, 0x541b, &(0x7f00005b8000)=0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00005b1000-0x15)='/proc/self/net/pfkey\x00', 0x2002, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00004ec000)=0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00002c5000-0xc)={0x7, r0, 0x1}) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000c3d000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) 2018/01/25 21:01:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000184000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000285000)={0x0, 0x0, 0x100000000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000956000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f000097f000-0x8)={r2, r3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 124.724580] binder: 18453:18455 transaction failed 29189/-22, size 0-8 line 2788 2018/01/25 21:01:50 executing program 6: r0 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000001000-0x30)={0x30, 0x0, 0x1, 0x80000001, 0x5, 0x8, 0xa00000, 0x80000001}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000733000-0xd)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000a5f000-0x2)=""/2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 124.731665] binder: 18450:18459 BC_ACQUIRE_DONE node 866 has no pending acquire request [ 124.731683] binder: 18450:18459 got reply transaction with bad transaction stack, transaction 867 has target 18450:0 [ 124.731695] binder: 18450:18459 transaction failed 29201/-71, size 0-0 line 2718 [ 124.737505] binder: 18454:18462 got reply transaction with no transaction stack [ 124.737513] binder: 18454:18462 transaction failed 29201/-71, size 0-0 line 2703 [ 124.737593] binder: 18454:18462 ioctl af01 0 returned -22 [ 124.740220] binder: 18456:18461 ERROR: BC_REGISTER_LOOPER called without request [ 124.743646] binder: 18456:18461 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 124.744689] binder: 18454:18465 got reply transaction with no transaction stack [ 124.744699] binder: 18454:18465 transaction failed 29201/-71, size 0-0 line 2703 [ 124.748103] binder: 18458:18464 got transaction with invalid offset (0, min 0 max 0) or object. [ 124.748137] binder: 18458:18464 transaction failed 29201/-22, size 0-8 line 2966 [ 124.754829] binder_alloc: binder_alloc_mmap_handler: 18456 20000000-20002000 already mapped failed -16 [ 124.758057] binder: BINDER_SET_CONTEXT_MGR already set [ 124.758065] binder: 18456:18461 ioctl 40046207 0 returned -16 [ 124.758974] binder_alloc: 18450: binder_alloc_buf, no vma [ 124.759010] binder: 18453:18455 transaction failed 29189/-3, size 0-8 line 2903 [ 124.762837] binder: 18456:18471 ERROR: BC_REGISTER_LOOPER called without request [ 124.768389] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.768402] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.775352] binder_alloc: binder_alloc_mmap_handler: 18450 20000000-20002000 already mapped failed -16 [ 124.777576] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.778847] binder_alloc: 18450: binder_alloc_buf, no vma [ 124.778871] binder: 18458:18473 transaction failed 29189/-3, size 0-8 line 2903 [ 124.779259] binder: undelivered transaction 871, process died. [ 124.785194] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.788299] binder: BINDER_SET_CONTEXT_MGR already set [ 124.788309] binder: 18450:18459 ioctl 40046207 0 returned -16 [ 124.788402] binder_alloc: 18450: binder_alloc_buf, no vma [ 124.788427] binder: 18451:18466 transaction failed 29189/-3, size 0-0 line 2903 [ 124.797907] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.798450] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.806331] binder_alloc: 18450: binder_alloc_buf, no vma [ 124.806361] binder: 18480:18484 transaction failed 29189/-3, size 0-8 line 2903 [ 124.823817] binder: release 18450:18459 transaction 867 out, still active [ 124.823840] binder: send failed reply for transaction 867, target dead [ 124.824160] binder: 18480:18484 transaction failed 29189/-22, size 0-8 line 2788 [ 124.836712] binder: 18487:18490 got reply transaction with no transaction stack [ 124.836721] binder: 18487:18490 transaction failed 29201/-71, size 0-0 line 2703 [ 124.838145] binder: 18478:18483 ERROR: BC_REGISTER_LOOPER called without request [ 124.840116] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.840309] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.846383] binder: 18478:18483 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 124.850079] binder: 18486:18488 transaction failed 29189/-22, size 0-8 line 2788 [ 124.859861] binder_alloc: binder_alloc_mmap_handler: 18478 20000000-20002000 already mapped failed -16 [ 124.863550] binder: 18486:18488 transaction failed 29189/-22, size 0-8 line 2788 [ 124.865301] binder: 18486:18493 BC_ACQUIRE_DONE u0000000000000000 no match [ 124.865311] binder: 18486:18493 got reply transaction with no transaction stack [ 124.865319] binder: 18486:18493 transaction failed 29201/-71, size 0-0 line 2703 [ 124.867546] binder: BINDER_SET_CONTEXT_MGR already set [ 124.867554] binder: 18478:18483 ioctl 40046207 0 returned -16 [ 124.867579] binder: 18478:18494 ERROR: BC_REGISTER_LOOPER called without request [ 124.872439] binder_alloc: 18478: binder_alloc_buf, no vma 2018/01/25 21:01:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000fe3000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000e9e000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000034c000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) clock_nanosleep(0x0, 0x0, &(0x7f0000b85000)={0x0, 0x0}, &(0x7f00001aa000-0x10)={0x0, 0x0}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) tkill(0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000d9f000-0x12)='.request_key_auth\x00', &(0x7f00007d5000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00007ea000-0x1d)='eth0system:%posix_acl_access\x00', 0xfffffffffffffff9) pipe(&(0x7f0000601000)={0x0, 0x0}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) keyctl$assume_authority(0x10, r0) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00003e6000-0x8)={0x9f67, 0x9}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000619000-0x4)=0x9, &(0x7f0000160000-0x8)=0x4) 2018/01/25 21:01:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000485000)={0x0, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @loopback=0x0}, &(0x7f0000da5000-0x4)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000391000-0xc)={@multicast2=0xe0000002, @broadcast=0xffffffff, r1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:51 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000627000)=0x0) ptrace$cont(0x2f, r0, 0x2895f96c, 0x100000000) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) r3 = syz_open_dev$sndmidi(&(0x7f0000001000)='/dev/snd/midiC#D#\x00', 0x7, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r3, &(0x7f0000003000)={0x0, 0xffffffffffffffff, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000004000-0x4)=0x10) recvfrom$ipx(r3, &(0x7f0000003000-0x20)=""/32, 0x20, 0x2021, &(0x7f0000003000-0x10)={0x4, 0x9, 0x6, "cda43d553496", 0x67, 0x0}, 0x10) 2018/01/25 21:01:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000352000-0xd)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = msgget$private(0x0, 0x200) msgctl$MSG_INFO(r1, 0xc, &(0x7f00005ef000)=""/4096) 2018/01/25 21:01:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x13e2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000b0a000-0x12)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffeffff, 0x640000) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f000001a000)=0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f00009d8000-0x58)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00009e3000-0x18)=[], &(0x7f0000632000)=[0x38]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = syz_open_dev$sndpcmp(&(0x7f0000f04000)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x200) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000e0c000-0x4)=0x8001, 0x4) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) [ 124.872462] binder: 18478:18483 transaction failed 29189/-3, size 24-0 line 2903 [ 124.873325] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.883059] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.883071] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.883221] binder: undelivered TRANSACTION_ERROR: 29189 [ 124.889813] binder: undelivered transaction 881, process died. [ 125.237922] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.243462] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) [ 125.266340] binder: 18497:18501 got reply transaction with no transaction stack 2018/01/25 21:01:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x1000000008001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x3, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) [ 125.282761] audit: type=1326 audit(1516914111.329:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 2018/01/25 21:01:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80006, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000f78000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000fee000)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000155000)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xaf, r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000c17000)=0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000dc0000+0x4d5)=0xfffffffffffff7a2, &(0x7f000070a000-0x4)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000e83000-0x16)='/selinux/checkreqprot\x00', 0x2040, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000380000)=0x8, &(0x7f00001f0000-0x8)=0x4) 2018/01/25 21:01:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x2, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f000017e000-0x10)={0x0, {""/7}, 0x0}, &(0x7f0000f44000-0x4)=0x10, 0x800) write(r0, &(0x7f0000c22000)="f36c190bbcf96008f8907f9611745b445f5ebcd6c2b9fbad371c92caa085b0151fea36c2c4d9211b8eccc50c4ea9bf96f94d48fb7d1efa7c1d38b9d2c774c909f5bf7c50c30a352b59f955c3dada027aa96b2aec7164624335720907914c0182d0bf4bd83a34222c8566642711af0f949ae157b4ff36929788", 0x79) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) r2 = dup2(r0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00005f4000)={0x6}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$TCSBRKP(r2, 0x5425, 0xfc0000000000) ioctl$TCSBRK(r2, 0x5409, 0x2) ioctl(r0, 0x40000000000000, &(0x7f0000168000-0x98)="8fd23a55af2a69afdf9dc4e76c66c71e57b700dc841989d6c36a6ad6d2109622b2e43d8de3f6919b1e641ff811cd19e7e10ef4beba54f5d437051654439960cc64822fb3c7ec9d18d687825e068e41baf5c07322299d41c9d733d64520ef6436958f134b5387e6fb9530276de9edd365a9742b01c0c73f2583088b59e714e68940ba78146f3c0315fe87dd27dbe1a32ec51287db56bd01cb") getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00008a7000)=0xd1, &(0x7f0000b16000)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) [ 125.283999] binder: 18495:18505 BC_ACQUIRE_DONE node 887 has no pending acquire request [ 125.284061] binder: 18495:18505 got reply transaction with bad transaction stack, transaction 888 has target 18495:0 2018/01/25 21:01:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000699000)={0x3, 0x0, &(0x7f0000d19000/0x12000)=nil}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) [ 125.284073] binder: 18495:18505 transaction failed 29201/-71, size 0-0 line 2718 [ 125.284684] audit: type=1326 audit(1516914111.331:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=230 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.285238] audit: type=1326 audit(1516914111.331:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.285692] audit: type=1326 audit(1516914111.332:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=186 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.285967] audit: type=1326 audit(1516914111.332:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.286598] audit: type=1326 audit(1516914111.333:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=222 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.287051] audit: type=1326 audit(1516914111.333:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.287568] audit: type=1326 audit(1516914111.334:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=200 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.287834] audit: type=1326 audit(1516914111.334:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18500 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 125.296810] binder_alloc: 18495: binder_alloc_buf, no vma [ 125.296842] binder: 18504:18509 transaction failed 29189/-3, size 0-8 line 2903 [ 125.303572] binder: BINDER_SET_CONTEXT_MGR already set [ 125.303581] binder: 18495:18514 ioctl 40046207 0 returned -16 [ 125.310164] binder: 18499:18502 transaction failed 29189/-22, size 0-0 line 2788 [ 125.310585] binder_alloc: 18495: binder_alloc_buf, no vma [ 125.310613] binder: 18495:18505 transaction failed 29189/-3, size 40-0 line 2903 [ 125.332576] binder: 18495:18514 BC_ACQUIRE_DONE u0000000000000000 no match [ 125.332586] binder: 18495:18514 got reply transaction with no transaction stack [ 125.332595] binder: 18495:18514 transaction failed 29201/-71, size 0-0 line 2703 [ 125.340695] binder_alloc: 18495: binder_alloc_buf, no vma [ 125.340727] binder: 18500:18506 transaction failed 29189/-3, size 0-8 line 2903 [ 125.341171] binder: 18499:18502 transaction failed 29189/-22, size 0-0 line 2788 [ 125.350168] binder_alloc: 18495: binder_alloc_buf, no vma [ 125.350204] binder: 18504:18509 transaction failed 29189/-3, size 0-8 line 2903 [ 125.360599] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.360766] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.361909] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.361921] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.365497] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.369451] binder: 18518:18522 ERROR: BC_REGISTER_LOOPER called without request [ 125.370850] binder: 18518:18522 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 125.375277] binder_alloc: 18495: binder_alloc_buf, no vma [ 125.375299] binder: 18500:18523 transaction failed 29189/-3, size 0-8 line 2903 [ 125.378424] binder: 18497:18520 got reply transaction with no transaction stack [ 125.378434] binder: 18497:18520 transaction failed 29201/-71, size 0-0 line 2703 [ 125.383574] binder_alloc: binder_alloc_mmap_handler: 18518 20000000-20002000 already mapped failed -16 [ 125.384929] binder: BINDER_SET_CONTEXT_MGR already set [ 125.384938] binder: 18518:18522 ioctl 40046207 0 returned -16 [ 125.384980] binder: 18518:18522 ERROR: BC_REGISTER_LOOPER called without request [ 125.386126] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.386181] binder: release 18495:18505 transaction 888 out, still active [ 125.386185] binder: undelivered TRANSACTION_COMPLETE [ 125.386192] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.386210] binder: send failed reply for transaction 888, target dead [ 125.390622] binder_alloc: 18518: binder_alloc_buf, no vma [ 125.390643] binder: 18518:18522 transaction failed 29189/-3, size 24-0 line 2903 [ 125.401698] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.401710] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.406313] binder: 18528:18530 transaction failed 29189/-22, size 0-8 line 2788 [ 125.411665] binder: 18527:18533 BC_ACQUIRE_DONE node 903 has no pending acquire request [ 125.411684] binder: 18527:18533 got reply transaction with bad transaction stack, transaction 905 has target 18527:0 [ 125.411696] binder: 18527:18533 transaction failed 29201/-71, size 0-0 line 2718 [ 125.415661] binder: undelivered transaction 898, process died. [ 125.428831] binder_alloc: 18527: binder_alloc_buf, no vma [ 125.428854] binder: 18525:18536 transaction failed 29189/-3, size 0-0 line 2903 [ 125.432194] binder_alloc: 18527: binder_alloc_buf, no vma [ 125.432228] binder: 18535:18537 transaction failed 29189/-3, size 0-8 line 2903 [ 125.435378] binder_alloc: 18527: binder_alloc_buf, no vma [ 125.435413] binder: 18528:18530 transaction failed 29189/-3, size 0-8 line 2903 [ 125.438453] binder: BINDER_SET_CONTEXT_MGR already set [ 125.438463] binder: 18527:18540 ioctl 40046207 0 returned -16 [ 125.440143] binder: 18528:18539 BC_ACQUIRE_DONE u0000000000000000 no match [ 125.440152] binder: 18528:18539 got reply transaction with no transaction stack [ 125.440159] binder: 18528:18539 transaction failed 29201/-71, size 0-0 line 2703 [ 125.442301] binder_alloc: 18527: binder_alloc_buf, no vma [ 125.442333] binder: 18527:18533 transaction failed 29189/-3, size 40-0 line 2903 [ 125.443787] binder: 18538:18542 ERROR: BC_REGISTER_LOOPER called without request [ 125.443847] binder: 18538:18542 ioctl 5425 fc0000000000 returned -22 [ 125.443896] binder: 18538:18542 ioctl 5409 2 returned -22 [ 125.443948] binder: 18538:18542 ioctl 0 20167f68 returned -22 [ 125.446545] binder: 18538:18542 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 125.451988] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.452369] binder: release 18525:18531 transaction 904 out, still active [ 125.452374] binder: undelivered TRANSACTION_COMPLETE [ 125.487668] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.487680] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.489179] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.490861] binder_alloc: binder_alloc_mmap_handler: 18538 20000000-20002000 already mapped failed -16 [ 125.495742] binder: BINDER_SET_CONTEXT_MGR already set [ 125.495751] binder: 18538:18542 ioctl 40046207 0 returned -16 [ 125.495774] binder: 18538:18548 ERROR: BC_REGISTER_LOOPER called without request [ 125.496920] binder: 18538:18542 ioctl 5425 fc0000000000 returned -22 [ 125.496940] binder: 18538:18548 ioctl 5409 2 returned -22 [ 125.499443] binder: 18538:18542 ioctl 0 20167f68 returned -22 [ 125.508715] binder: undelivered transaction 913, process died. [ 125.516399] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.523641] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.524224] binder: release 18527:18533 transaction 905 out, still active [ 125.524229] binder: undelivered TRANSACTION_COMPLETE [ 125.524237] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/25 21:01:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f000003a000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0xffffffffffffffff, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f0000397000)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x238, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$bt_l2cap(0x1f, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000021000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f00009ea000)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000297000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = dup(r0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00009cb000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/64, ""/32, [0x0, 0x0]}) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r4 = fcntl$getown(r3, 0x9) fcntl$lock(r2, 0x5, &(0x7f0000595000)={0x0, 0x3, 0x5, 0x101, r4}) 2018/01/25 21:01:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000220000)='/selinux/enforce\x00', 0x214140, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00006fc000-0x1)=0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) r1 = inotify_add_watch(r0, &(0x7f0000134000)='./file0\x00', 0x2) linkat(r0, &(0x7f00007ce000)='./file0\x00', r0, &(0x7f0000e0d000-0x8)='./file0\x00', 0x400) inotify_rm_watch(r0, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00003c2000-0xb)='/dev/hwrng\x00', 0xc840, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000fec000-0x4)=0x0, &(0x7f0000cb7000)=0x4) writev(r0, &(0x7f000030d000)=[{&(0x7f000042d000-0xe)="c04379499f9496932ad7379d8ea7", 0xe}, {&(0x7f0000892000-0xe9)="5b72d5e59d646fd31f6f2dcc39308c06fc7ec1016e129d037f4cea67a5afaef9da1160a89d985662a8ac840ec603d66d7ba0b3f6aa60da836a2446e3f778ce1a28358b1621a8cc3af69dd3021220a9a1876511d8f6b12c9393e6890295e1b34d7a7e0ff30aec48cf31efb42fe7c11835a21b740a8cb9a5a64ded5a802839305d450e3a5a18f20d57fa930aaf47be809cdbf9914b8f0021fad3849bddf6b927b20793ab93aa2da57706a420f2cbb7fac290e624abcba07c6fcdd75be595d1e06ea53f161aedf7580b9e8f02047d03c50dc4bf3e2646d38e0b8cb8e7fb0aa99a9036aacb9ec1a7093310", 0xe9}, {&(0x7f00004bb000-0x1a)="916592ffccc8933a362400422c117cd441cba6cd7b83061f512a", 0x1a}, {&(0x7f0000fc3000)="29beeb4a3c11407acb25bf4bc07197a6204f2d4d5d5fe84e9f3652129b6871929720cb72d578283b308c5807163eafdb9686c3825cf57a14981ac60886617b105dec638a3b418b57abd7ba853f69da3f", 0x50}, {&(0x7f0000a47000)="f28088f0fefdbc5b132c046532b70cf3ea9b88673350e8c5fd01a8fa4497d92f5e818dddac63419d19880694df75c10147b60ae3df7cf2103e8978755d4f1cbbe9d0caf92ea9cabbcc5aefbd421adeff1a90293aa82d1109e09e1ca336bce8e4720ac6ff78593142fa7c5a20291e538656f10c57937bb7dde621318b1f4b9a94e4489e79e7ead0ddf0b0ceaa71766194fb52fe2d51", 0x95}, {&(0x7f0000e5f000-0xa4)="4514ae44321a3a9cb191df62e6cc13db9057439c4dae36eb4c38f424afe431bb9eee382c140e3196b9b995d80612c169b565ee67bef3fd992b895189616790f1b8d2ad0f2cabc52ca8a3adf067c759b7f87a2a1c56ad342d18a240b1cfe45ecc656cd0c248289fb15e761a0487be70f6e13c7f1a89b0a79084073de865620ac125de779260a98b40fe3113b85eaec8d36f239af88d838f3805f801f3473915e7a32eca6b", 0xa4}, {&(0x7f00002ab000)="", 0x0}, {&(0x7f0000e26000-0xe8)="2b00db6e28136d15645ddfb7ab5f9d80a86a3c520ee9ec62605a2a5c5df9cbf8d3bfbeabc6749d17b113ecd2d95a7b2ad9a02f63796b78644907eb9d2bff9b66be0d85b1972a94064272fe83c7c7961863d53e1d0a0bc2a0c904d27174f9372566d6fbd2effdbbb60c7f693b487b9ef44a369659b63ba58ff7ebc8f6292de7f7c962ad76525ae1c0a245727dd410bc5cf9ec10b906809b06cc3c684031a351aa831e65acdbf53fff63cca4ef1d79432df8c421f797d9b4537e433007a0a4aeaff624571aff5a691a7d833666c4f95516163069cd78e899f52fbb5a4f84cdd49d5945aaea67d8d2c7", 0xe8}, {&(0x7f0000592000)="5da36af5e71d5483fea3d11fbe0979a9b526458f9255a6cd6e00bfc7ba07f3e8df70e983871d031b93f506625a9b12be8ba1e6da214845f88574ca94ab13215afb74f3175697db25f62af45d772e6ff3e281beb915f064c02283482883ddae698814db1b5ca16c80fb5eff701bc83e932186d6a6f01c1d249cecdb7132e47b549754c99d92e3b6610881b684d99a7d42f8f8157354eae00d2db2e68a", 0x9c}, {&(0x7f0000514000-0x4e)="1982e8ae480a37a38039892f435ac5c18a076b63714e01d299341dbd97c05c4897be316297c61692f091432f8abc3054d4853b606fa6cec4018c7267dfecd1604d9e2e506b2830f122d3125b3c79", 0x4e}], 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) fallocate(r1, 0x0, 0x10000, 0xffffffffffffff6a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000666000)='trusted\x00', 0x3) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00006ea000)={0x61, &(0x7f0000eb4000-0x61)="825f63b1045de2ed09b803a6dd7aa827b3054487e57367973a103183d535a1528d38ab2d7e28fa2edd07a25b3ef49e535fbaccc45dd0ca769a020ee388c5394118f4b6689a56fbf276e737468bc50f17fa9ac20e6a5ec8249d2bf93c51800303f7"}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000284000-0x54)=""/84) r1 = syz_open_dev$binder(&(0x7f0000c6a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 125.524255] binder: send failed reply for transaction 904, target dead [ 125.524263] binder: send failed reply for transaction 905, target dead [ 126.202264] binder: 18497:18501 transaction failed 29201/-71, size 0-0 line 2703 [ 126.214222] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.219733] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.244276] binder: 18550:18557 ERROR: BC_REGISTER_LOOPER called without request [ 126.246701] binder: 18555:18563 got transaction with invalid offset (0, min 0 max 0) or object. [ 126.246739] binder: 18555:18563 transaction failed 29201/-22, size 0-8 line 2966 [ 126.250324] binder: 18551:18559 BC_ACQUIRE_DONE node 915 has no pending acquire request [ 126.250341] binder: 18551:18559 got reply transaction with bad transaction stack, transaction 916 has target 18551:0 [ 126.250351] binder: 18551:18559 transaction failed 29201/-71, size 0-0 line 2718 [ 126.255648] binder: 18558:18565 got reply transaction with no transaction stack [ 126.255656] binder: 18558:18565 transaction failed 29201/-71, size 0-0 line 2703 [ 126.263492] binder: 18558:18566 got reply transaction with no transaction stack [ 126.263500] binder: 18558:18566 transaction failed 29201/-71, size 0-0 line 2703 [ 126.263578] binder: BINDER_SET_CONTEXT_MGR already set [ 126.263586] binder: 18551:18568 ioctl 40046207 0 returned -16 [ 126.268830] binder_alloc: 18551: binder_alloc_buf, no vma [ 126.268850] binder: 18552:18560 transaction failed 29189/-3, size 0-0 line 2903 [ 126.273276] binder_alloc: 18551: binder_alloc_buf, no vma [ 126.273305] binder: 18551:18559 transaction failed 29189/-3, size 40-0 line 2903 [ 126.275095] binder_alloc: 18551: binder_alloc_buf, no vma [ 126.275116] binder: 18555:18567 transaction failed 29189/-3, size 0-8 line 2903 [ 126.280213] binder: 18551:18568 BC_ACQUIRE_DONE u0000000000000000 no match [ 126.280221] binder: 18551:18568 got reply transaction with no transaction stack 2018/01/25 21:01:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x58, 0x0}, {r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x3, 0x1) 2018/01/25 21:01:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000fd8000-0xc)={0x4, 0xffffffffffffff9c, 0x1}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000f6a000-0x4)=0x0, &(0x7f0000b43000)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000771000)='/dev/snd/pcmC#D#c\x00', 0x7, 0xa0000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000861000-0x8)={0x0, 0x7}, &(0x7f00007f0000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000f24000-0x18)={r2, 0x1, 0x0, 0x81, 0x3ff}, &(0x7f0000d4b000-0x4)=0x18) 2018/01/25 21:01:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 126.280228] binder: 18551:18568 transaction failed 29201/-71, size 0-0 line 2703 [ 126.299552] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.299564] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.304396] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.304407] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.318293] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.318636] binder: release 18551:18559 transaction 916 out, still active [ 126.318656] binder: send failed reply for transaction 916, target dead 2018/01/25 21:01:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = syz_open_dev$dspn(&(0x7f0000e0a000)='/dev/dsp#\x00', 0x9, 0x2000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x83e3) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00002d2000)=0x22, 0x4) 2018/01/25 21:01:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000c8000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) [ 126.450368] binder: 18573:18576 transaction failed 29189/-22, size 0-8 line 2788 [ 126.458532] binder: 18574:18581 got reply transaction with no transaction stack [ 126.458542] binder: 18574:18581 transaction failed 29201/-71, size 0-0 line 2703 [ 126.459626] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.462581] binder: 18553:18569 transaction failed 29189/-22, size 0-8 line 2788 [ 126.465527] binder: 18574:18581 got reply transaction with no transaction stack [ 126.465536] binder: 18574:18581 transaction failed 29201/-71, size 0-0 line 2703 [ 126.467963] binder_alloc: binder_alloc_mmap_handler: 18550 20000000-20002000 already mapped failed -16 [ 126.473131] binder: BINDER_SET_CONTEXT_MGR already set [ 126.473142] binder: 18550:18557 ioctl 40046207 0 returned -16 [ 126.477874] binder: 18550:18557 ERROR: BC_REGISTER_LOOPER called without request [ 126.480520] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.487074] binder: 18586:18587 transaction failed 29189/-22, size 0-0 line 2788 [ 126.497732] binder: 18586:18587 transaction failed 29189/-22, size 0-0 line 2788 [ 126.497765] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.497877] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.504364] binder: 18589:18590 transaction failed 29189/-22, size 0-8 line 2788 [ 126.521880] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.522047] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.523250] binder: 18578:18585 BC_ACQUIRE_DONE node 932 has no pending acquire request [ 126.523268] binder: 18578:18585 got reply transaction with bad transaction stack, transaction 933 has target 18578:0 [ 126.523278] binder: 18578:18585 transaction failed 29201/-71, size 0-0 line 2718 [ 126.526728] binder: 18589:18590 got transaction with invalid offset (0, min 0 max 0) or object. [ 126.526769] binder: 18589:18590 transaction failed 29201/-22, size 0-8 line 2966 [ 126.526816] binder: 18589:18595 BC_ACQUIRE_DONE u0000000000000000 no match [ 126.526824] binder: 18589:18595 got reply transaction with no transaction stack [ 126.526830] binder: 18589:18595 transaction failed 29201/-71, size 0-0 line 2703 [ 126.531123] binder: BINDER_SET_CONTEXT_MGR already set [ 126.531134] binder: 18578:18598 ioctl 40046207 0 returned -16 [ 126.533705] binder_alloc: 18578: binder_alloc_buf, no vma [ 126.533727] binder: 18578:18593 transaction failed 29189/-3, size 40-0 line 2903 [ 126.533842] binder: 18578:18598 BC_ACQUIRE_DONE u0000000000000000 no match [ 126.533850] binder: 18578:18598 got reply transaction with no transaction stack [ 126.533857] binder: 18578:18598 transaction failed 29201/-71, size 0-0 line 2703 [ 126.541806] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.541817] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.584474] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.590349] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.590361] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.590509] binder: release 18578:18585 transaction 933 out, still active [ 126.590514] binder: undelivered TRANSACTION_COMPLETE [ 126.590521] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.590539] binder: send failed reply for transaction 933, target dead 2018/01/25 21:01:52 executing program 6: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000063e000-0x10)='/selinux/policy\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000fcf000)={0x0, 0x0}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) pipe2(&(0x7f0000c4f000-0x8)={0x0, 0x0}, 0x4000) accept4$packet(r1, &(0x7f000086a000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000739000)=0x14, 0x800) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$adsp(&(0x7f0000235000-0xb)='/dev/adsp#\x00', 0x6, 0x800) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000278000-0x11)='/selinux/relabel\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0xffffffffffffff2c, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) fsetxattr(r3, &(0x7f0000a24000-0x11)=@known='security.selinux\x00', &(0x7f0000a11000)="", 0x0, 0x2) 2018/01/25 21:01:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x1) 2018/01/25 21:01:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00006e7000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000e60000-0x4)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x27, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000a85000)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000d5a000)=""}) 2018/01/25 21:01:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009be000-0x30)={0x6, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc7, &(0x7f000051c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f000037e000-0x58)="5def5c1a195106e9f4d778d141b9d0911de99564c30243da52d64e61a6fd4a06cbd6ed1c4544d266391fb6ab3b51b4f6c80e304ffd81001b193063344c19c9a204c0670cbd28fe2b84c211deca061c437134720a378f1563"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000c37000-0x4)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000096e000)={0x0, 0x0}) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00009b8000)={0x1800000000000000, 0x4000, 0x7fff, 0x5, 0x15, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) 2018/01/25 21:01:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000541000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000d86000)='./file0\x00', 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000171000-0x68)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r1, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x1) [ 126.805638] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.828866] binder: 18600:18604 got reply transaction with no transaction stack 2018/01/25 21:01:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000635000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000df5000)=0x0) getpgid(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:52 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x800, 0x200, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001000)=""/136, 0x88, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000001000-0x10)={0xc5, 0x5, 0x9, 0x1f}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001000)=0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000001000-0x14)={0x3, 0x2, 0x4, 0x2, 0x1000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000415000-0x1)='\x00', 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f00000b0000)={{0xffffffffffffffff, 0x100000000, 0x8, 0xffffffffffffffff, 0xb7, 0x8002}, 0x80000000001ff, 0x7fffffff, 0xf7}) r3 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open_by_handle_at(r2, &(0x7f00005dd000-0x1008)={0x1008, 0x0, "d9017df3643e17561f03329927b1ee0e8533a9589875d34bc366971979d98bf68f367d019d125746dcdec0e29073dc6314d9355a87e373a89d9ad23fa05b5a4b97596d3d6f97a7f642965c4b7a73b66c2da9ae85edf0aaed288c3ee9feb2b5b2883e506872affe1923603b07fd690a31abb7726b560f87214c9806bad466d3c20a5b7b309249a8224aed02415e07e13b82ed366d1d7d16cc8611ebc2934b4b61e2c1097acb81cf1d249339028650c87e090bfa996d1f9c281381725e6d8b122d81a13583cfee12265036c9518e94c39f2f9e4b4215a53cbba3f1194fb4ed12ad4f94ed8bf77f8fc575ba8fa315dafc114c7892d5b7893c3dd6f51b4741f2789f9ba629b3fa374f4996cf955554c4f441347069d9b6a27e24cbc4f31d8904a8161e5b65e4d9b7d4264018b93ee341ec221faef7f8b60a0a6d27bb15a164571fbc6dd993de8bac3c677a34e466e8417e46c9e3c821ac5e26aefb6203fbb1ed98c0938e3f31ea10d763f092449396eb82389e3d6dd08befa0e2d884c2be67611a0e8f8ea57c245ab5649bf4c0bac019edb83672f2b640c4cd7d57ec3f907909355f647d1b1475c0d855c124654a7c5f0fa932ac37a47cda6457e25dd451f73cb962d404fd7080a46528ed22996df82f9a7c8c4ac5d3aec82a64a65339c0cc7de257e74fbb95cb779a30bb925bfb121f1e6367ac1b9950475cd6b85c07d6f2ee278ac2bc4235775f7cdf4c022819bad669d31536ff007f3fc3dec32eac0fc82f2a509044c61373352bb7831867117c77384e54928f16c22718d412e70a7723c25799f6edde00a11389b5c626f84c6b66739a76e4eded53a43fb565e54794f21a8f574747d72c60c4b546b12dfb2aad9ffc1ef43de7d8a7be5c9bca87acbe6c22e1116e1c3f0be3e3367cc19867533243c42fe8c5e92c5f980253ff6e3460151b658512a3b0624de8ba0f14b437ba032f766209120208041fae00e2ff0e64fc311198e78314aa547bf487b81e64d1ba016e64194770547f08c5b2c1f4dd6ed3ccf1a4d8087a581d56eb7452a99598c8aeb964451ebcd912e1432142a654ee475e8000257126e71a1f648069f15f8e27ba6c3095bc55af5514888f61be6195a5cc04ea744bb9ceef916514148d803aa38bce59eedb86dbb8aff1cea99d681bfe8f2487e2421d879551ec8d8ea28b1f521fd3a41189c39589de5060abe16e393fe4060e41a097e724a3eed585fb3b9c58e65cc4c8b1208ecedee8800ba54b842e55b61a7a5a22c08f7be49cb383c690ff594401bf6514f515ed515d37d73acbaa51ff31097ba374d99cff7d87e3d51ca294612e69dac55cc17496b67218afe8a89cf00af14944ed19db829e932693a44f7e6ab0d65553a099f45ecc0c7bdccc32d510fef3bec395ae356c61a681ae9e87c1852816cbbeba1cead44361913a0fa1fd0e1ee160323199eb370546a7f1d04e5608b3ac5c15a3c17e7647dd3d4257cbe01d4135932cd654bb3c75b2fa2c5ac53f4991343a1e679719f60c684e4d4cb885e3b6a8aa71525253dfad6105987b3a1df28c34fddc6ecef128a4ea96787e0e79aa956053be3af405bd9c63d3fa2910a8b81b4440a11626e881b203320a03cb8236ec098ec494c4f9966c9972b6c7fc67a30bad0970e5e8a850f684bdfbe95256f23bee9e66b6099fa317832f24a6321dec7616f669f71918516562cf78c73632eba8754006252076ba47e46e425d88a4bbe547d821ecab75764c263fe5ffc7308fd9cc15603684cf701f6573ce0e0ff605f8c3dceb232db1886bcfdae2c3b9ec4697cbc62d0ba2d7fae8f7994c3d3f185f1730e369365147eb1904540ced025feff036c106691fb5062f65420ffd5839453789a5e7acde196dfd699069ff26b6e32199ae923cbe838e48b5fee615fb71ea28d56583833396742254b5f3dfd9bb1d17fd5ae4f68d327291964924a0397ba94051b602134e7c951e5bc469a0f514922c67fe0f90a88cfd963f846cad8e9adc25c790697d43b5c83f0a018eb55620ef864dcb900637d435de9810dd4d0925fa03c4b133ef9459004ef8f268638b392c2d17aedd8d9a07edd7609e6cd0ad92f6b35996cfd40409f7c6ec2ff271b23fbf353f6a99b1678f122ad0eccfe4580b314f3fe10a7623d52da7f79f3f785f0f280e746750c4bf2d2e104fa4f785571b1baf729122ee80388d6c00a782f4da3022506175d08312d3e67f4097f95b6b6d10c5458961a05e7d8112aa420f41d2693738f54d3b96e24a7a137f182ef1c1acdefaec5869ae2793c6efdaef0d8812098fcb8808971c6e6a9bbbca45864236e26eca7413fea675047a50cfd8a0ef8056bdded37e8c57ce8af24819871f2edf3fa5c7678566a7a99f9865e48cd12533715185cf39e2bcd123622944a27cc8d249ad238429395ef85f782075118eecc6b3bb5b5783eb28f452f66322f31b790b4354716eb8c404761cb9f1096aa13853e47f00421e2b93ce9a759039a2f7efd9564a6d3eb04f8159b88596e8cbd6213b4a4620eda5981416c6ecb0d71b4571964c863e04dd5e69dd119291dfc76b2db743c391f079b642653a8071da43040b9895156a2982617bf889200cbe2597c08bfb46dddaa6c0e66fce9de78579501e38d762fb15e17068486bb64aee61dbe8de0744aac01a630c86217cbd88272d4ca07221c0aff23fe9645a84a00fd63289a125d2a48b7b7c1d5b7b34df93dfd6f929c68d4684ba2b6a703c885cd8828745e5c3603f76f9c2252b38e84e63cba2cc961d9926eb52bc15524646b6df38825684f061aa7e6920c7916af10e6999b1c76870f30c115a973aa58a7052288b94118d9e70bc6f7e496d9073b2f97576182fd22f0a4790ac9c6f4897da7f92c7584e10c8dc9838cfb686558f971ea6c618df47354e0bd121942c6d1615e5a3407ed0aac3799dece26bf971cbe8f22f4b9819c0aef71d28bf4dba4c5c016ca0cdb5b64a58ca54d4c233c90b0bb4f0f88e09efccbd4b85bee51ce4bb9c769586c4f2b02e61e6d66365a63095777b06eee5e73303f9b7b63be309e344138e7d640a1b077dc3c38236807552bd4ad9c43709319ef6b1ea182eed1bdb9bdd8dde21a220a96261fe8393bf510db5eb4f0774067348f2c3bd4d97dfa8e9b8f127c23e7153b5d526e9222f826f2b80ee0110fc657bb838f2bad6bd7c0f95cb0cbac1e70a89321e254fc78b9db166c498d28ad947b974503365d742d526f30c29d99685479b4ca124b5d98072686d93abc11f220f8f2a98bdec61c2722eaee5ceaf0c2f35b2df930290a58fbd4a897f647937d9beb98a14ff34e856b1e6e1152bbcf25dd184ebfe40ae393c54521c55c2ed3a0f98bc8f0d94c5090424438d8191a19cbcceb0443a13de382a56f933aaa74d4db0cc3688fcb5a0eab4c1cf834128085bcd5a139e76c78ba82ff2266e1ec48469c16815b49c922dec0497fc6edbdd5798e9cfcabd993c8fc5beeed38ba939c4125872c15980c45c1365032899786c363e6950ef5150366e7e67fbeb2e0b34aeb0ea6bbef427f7e799156e6bd386058e11e72eef1cde0b9746513a9a6b10ffeb4ea0bd03b2f8ac6bd482b70822a24df5aa0c618d9e37b173dbd104fa512bf4773c62281332693b4ba02c3d88bbb4d962a058a465131bf9676acae239bf18d7dc19a5e0fc1a4f870fa2ff27f7f013f0b6a2c26dcf472884bba3669f1e7655c82432687601561b08873ee5d8c39bb42f417f0167e6cd58ea2dfed8bbaa991c19af4862d4aef77a891eaf5abe836749c08df08d2e9de14b76528dcc20bb414e2a1a38a66573d44c6de5b4677dac72cb20312537761f600c67e702ae386107798fce5026f3bf977be4c14dabdbd28f2820ce4bd74a23f0ba679bbf790b33bd10f47224235083f24b08edaa6171df30429ab113bb05733bb7ea791d198ac0281e60c9c61b18cce5cec823c6346d1536499dde0df0c1666613f730fe93d3c4bd0ef25569b180a97f62f5ff0abb79eeb34253b7b5aeb5dde958535e7a239b6809a9b5ea5e06d35d9e06d5cf25e7da7704ccd398c4232f131b409e4e9a3fb18dbc88e67a90e97be2207b8e5bfd798d922b9f2e5fa97903c2a27bd0e107b14e465647754f648f91927f8a444bef7006699067cc25de7d15b341f90b2eae6ca44702ccc3f767af47b9b1e1805ea83eb301d16c0b1c78092b517114fba72108ba9a0234b85a41bdf4062cf5d270ec26f2c5e3991b2b8a1fd637faaa591deca4a40e7d37756d7e170ed31fa55a515081498f75e5194f407f37eff9bad7b01c9c87dffdf5c603727cd1b910cde5d67eb516f99c0675f8b395e5d666225d8ee1b508f8bf6f0eb03680b11ae72b6f0b9502bc6d3d294431bebaa0d2fab6d1736606a7a8f9e7f103a1206ca904e03fec73e88e6fef0e38c6d18cf5f03ba99e1c215f82468804b722388226e10bc7ab72d05247d330097e9086f1761a19d1ee6a2d0274debe1f176bc1d28d352cdec6700e44390afa2fa915a709f4a5ad78f1af16d1aac6826744e5cbbf793003c909ad2ed564955bf38365b9d47e8ee1359d24c5485d2a579a903e84ef0b816d7a9b398cfacc564e3276385ba9a4c15e1622d149a7d18be2fc48638e5fcdceb283c80978aa280c573dc466fbadb4ef1e96f8e71e703d8ade9f0052f6a5f20b3b679f8c189a49f9ab1d27ec3be99b31c677b4e785b7161d732bd5c61fa6547c524ae4ab39bc879721df3e598780a3a2d44ec62f85a136797e319b69540f3d931e02a37bd5d8e5d7ea949904bea794a761ef5a5d05fea9b78e4fd8fee2ea59dbbf04cd64518e75b88f26e2c512f9e98cf403f7aa06a41705e1235ee742079bf67c0fd0f925a6f0272011d7cc1976af768d7f3c4094a9ad42b4b01a081b7b6693ac83481797f049af9256ff0808fad29570a217a4eddf62201e416d134e35b69e096f919b9d52db88c985f93ab787b2aefd3d5ca2ebdb40229dc381dac7ed3c234ba36211414f1062f2ae2127e0a3120fc8bdb177761df22bd81b342b15426666d19ff5a126d2720ef6e9bb795b21f7641f370ec094d2354b2e637868a92fefc82699e8a10e777cf9b68e575fe5f6de4f27ab68d050decb05cf964dbd719653c3472fa017b1ce30ab5f9780dbe88cfe374df5b2c0185cb7e3cdb1980b808f61a47546c6d9121bf845be04478b93c7c0bffd1d92af195a8734289dd61946c413d1b7640f8cadc211542f25541da2e2d995ac4e8337ffcc4fea0f121478ed8520b357cd6caf2922199c51ec76eb95116ba13d4aa06a761937d2b34a78388b2fdbde5c1c15e8f634b293299cd2f405c550d070f7d9be9d123199a8e1f1ba0c44bdde8cc3ae6ae724e53b5246d829e3bc92e99c3d5278e3eb1593c93794ede65ad315d8d16ae04cdab24e1e5c80ee0094d0489c6ec3bbe983fcc9a88628406967a364debb719bbb6029837da49cd4124ef04edf486a3148e0035ff5fff2e6beb2c490d2f0b4e07b78eb224393fd496b268572593f16bf87ee590e4a60e97781db973a9fec81ca5a61566300f49dd3f51cc1271b2a2e4b9028396b7193ca6732e844120ae2c8cc6ca1f2a81366f75e9ae966e81f7e94942ee33c9086cb8fa92ddf76f7974fc9580fe4a43a7ea816d31f812c81a3b22a71aed2daa7eb29ea58d5eeed2aa60aaef1f9ecd2c6f896108b3274bbd0e254c61b8d0d3a94b6888414fba1bbcce041f0ff658d3951aa7fad0a31bbbb4b5ec803421494679aeb6c4ff4a449503e6de554ea692d9aa8e9c9409ce7b9f043b7f07557c0"}, 0x30080) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x1) 2018/01/25 21:01:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$inet(r0, &(0x7f00000e0000-0x10)={0x0, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000875000-0x4)=0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f000098b000-0x4)={0xcb}, 0x4) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:52 executing program 3: r0 = add_key$keyring(&(0x7f00005ba000)='keyring\x00', &(0x7f0000ac9000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000b16000-0x10)={r1, 0x28, &(0x7f000037e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000eba000-0xc)={r2, 0x0, 0x18}, 0xc) pselect6(0x40, &(0x7f000051c000-0x40)={0xfffffffffffff8f9, 0x5, 0x0, 0xaeb, 0x7fffffff, 0x0, 0xfffffffffffffffb, 0x100}, &(0x7f0000a08000-0x40)={0xdf62, 0x6, 0x5, 0x0, 0x7, 0x8, 0x80, 0x6}, &(0x7f0000a91000-0x40)={0x8, 0x6b, 0x0, 0x1f, 0x1, 0x6, 0x8, 0x6}, &(0x7f000055a000-0x10)={0x0, 0x0}, &(0x7f0000de7000)={&(0x7f00003f3000+0xcd1)={0x2}, 0x8}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) [ 126.843467] binder: 18605:18607 transaction failed 29189/-22, size 0-0 line 2788 [ 126.846456] binder: 18601:18611 ERROR: BC_REGISTER_LOOPER called without request [ 126.846466] binder: 18611 RLIMIT_NICE not set [ 126.851351] binder: 18603:18612 transaction failed 29189/-22, size 0-8 line 2788 [ 126.854613] binder: 18608:18613 transaction failed 29189/-22, size 0--569 line 2788 [ 126.861755] binder: 18610:18614 BC_ACQUIRE_DONE node 944 has no pending acquire request [ 126.861772] binder: 18610:18614 got reply transaction with bad transaction stack, transaction 945 has target 18610:0 [ 126.861783] binder: 18610:18614 transaction failed 29201/-71, size 0-0 line 2718 [ 126.879910] binder: 18601:18620 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 126.884741] binder_alloc: 18610: binder_alloc_buf, no vma [ 126.884768] binder: 18603:18617 transaction failed 29189/-3, size 0-8 line 2903 [ 126.886104] binder_alloc: 18610: binder_alloc_buf, no vma [ 126.886137] binder: 18608:18613 transaction failed 29189/-3, size 0--569 line 2903 [ 126.887299] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.894176] binder_alloc: binder_alloc_mmap_handler: 18601 20000000-20002000 already mapped failed -16 [ 126.899408] binder: BINDER_SET_CONTEXT_MGR already set [ 126.899416] binder: 18601:18611 ioctl 40046207 0 returned -16 [ 126.900479] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.900565] binder: 18601:18620 ERROR: BC_REGISTER_LOOPER called without request [ 126.900575] binder: 18620 RLIMIT_NICE not set [ 126.910171] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.915913] binder: BINDER_SET_CONTEXT_MGR already set [ 126.915922] binder: 18610:18625 ioctl 40046207 0 returned -16 [ 126.919239] binder: 18610:18625 BC_ACQUIRE_DONE u0000000000000000 no match [ 126.919248] binder: 18610:18625 got reply transaction with no transaction stack [ 126.919256] binder: 18610:18625 transaction failed 29201/-71, size 0-0 line 2703 [ 126.919528] binder_alloc: 18610: binder_alloc_buf, no vma [ 126.919559] binder: 18610:18614 transaction failed 29189/-3, size 40-0 line 2903 [ 126.922633] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.922645] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.926995] binder_alloc: 18601: binder_alloc_buf, no vma [ 126.927064] binder: 18601:18611 transaction failed 29189/-3, size 24-0 line 2903 [ 126.928595] binder_alloc: 18610: binder_alloc_buf, no vma [ 126.928628] binder: 18628:18631 transaction failed 29189/-3, size 0-8 line 2903 [ 126.937756] binder_alloc: 18610: binder_alloc_buf, no vma [ 126.937777] binder: 18629:18632 transaction failed 29189/-3, size 0-0 line 2903 [ 126.952130] binder_alloc: 18610: binder_alloc_buf, no vma [ 126.952160] binder: 18635:18639 transaction failed 29189/-3, size 0-8 line 2903 [ 126.953699] binder_alloc: 18610: binder_alloc_buf, no vma [ 126.953730] binder: 18628:18631 transaction failed 29189/-3, size 0-8 line 2903 [ 126.960075] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.960088] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.960261] binder: release 18610:18614 transaction 945 out, still active [ 126.960266] binder: undelivered TRANSACTION_COMPLETE [ 126.960273] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.960291] binder: send failed reply for transaction 945, target dead 2018/01/25 21:01:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x1) 2018/01/25 21:01:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000202000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000d76000-0x8)={0x0, 0x4}, &(0x7f0000269000)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000cdb000)={r2, 0x6, 0x3, 0x0, 0x3, 0x1}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = syz_open_dev$amidi(&(0x7f0000f4e000-0xc)='/dev/amidi#\x00', 0x401, 0x410881) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000324000-0x8)={0x8, 0xaf3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f000076f000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:53 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002c4000-0x48)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f}, [@generic={0x4, 0x43dd, 0x0, 0x1}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c4e000-0xa)='syzkaller\x00', 0xffffffff, 0xc8, &(0x7f0000b70000)=""/200, 0x41100, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000000)=""/15, 0xf) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000cba000)='/selinux/status\x00', 0x0, 0x0) 2018/01/25 21:01:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000004e000)='/dev/vcs\x00', 0x141001, 0x0) unlinkat(r0, &(0x7f0000601000)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00002d8000-0x10)={0x1, 0xfffffffffffffdbe, 0x9, 0x64800000}, 0x10) recvmsg$netrom(r0, &(0x7f00003f7000)={&(0x7f0000599000)=@ax25={0x3, {"422bdfbcbbc774"}, 0x3}, 0x10, &(0x7f000087e000)=[{&(0x7f0000deb000)="28a86a757f9f0f0734e04e4e795cf9c058dea2d49c102c62fe81ce3f4dc5909533d4b9c04ec67d1a098c6a9afda33f0e6967770328526ac415f8989ba0cc3965334bc75a47f2c8dfc2406981c72f3f23343909194e79a419c102d10fe2ab1cf6a0191f011be2ec28f33de11e5dc52a67ef7386c686b9cc467d5561c7b01a8997b4acecdfeb27892686655858d2582be1a58dd3002d04ff27f39c2ee2ecdde83e318131d306f3e7d7f7cfeea142cb321949131f05622e2737675f5dc42b84a3d2dce27c73147001dd0f9326c30c2af0f3849bbe3885fb721332e287", 0xdb}, {&(0x7f0000518000)="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", 0x1000}], 0x2, &(0x7f0000973000)=[{0x40, 0x117, 0x7, "3d6f74d78b92d7f3dd869ba74998282391858a148ac7ef573a0e0aec9bbf76823035b4736381370b50af54a7e86f"}, {0x18, 0x1ff, 0x100, "5b9e7e98b92b811b"}], 0x58, 0xc001}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) timer_create(0x7, &(0x7f0000fd4000-0x60)={0x0, 0x2f, 0x7, @thr={&(0x7f0000ce1000)="41adca193712b7c93ac26482b0af3d41c6f747aec0c13faa3be1d164542a0eafc3288b649e354925a5b9445a064cd3d0f1cfd4e67a4090679d", &(0x7f0000537000-0xcc)="bc7d0644bcf9a09793c96018f3f7dc5b0562c2e7596930e46c9f1153ff7158b806ed4caf57a7433b99f95be09e501ce0408437c5495c11c5aeb9a9970394129884110af3a6bbe1576e791d7e93904af966395c13b23606109287c59c98db4ac141d7e812ac53e92668abc405c7ca8dd11111c57e57dc43e33745a02afcc2c348d4a6f3558acdc2703545266bc7df7293e1f67c4c0fe962410ab7605426179922173f94d6e30438e9851720f5363030f3f18b40fd3016a8864fe28e597899d9a11f0d5112bb9bbe8520ad4ef6"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000232000)=0x0) 2018/01/25 21:01:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000770000)={0x60000000, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000f9a000)={0xfffffffffffdfffb, 0x0}) [ 126.971483] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.971582] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.990744] binder: undelivered TRANSACTION_ERROR: 29189 [ 127.118350] binder: undelivered TRANSACTION_ERROR: 29189 [ 127.253775] binder: 18600:18604 transaction failed 29201/-71, size 0-0 line 2703 [ 127.265287] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/25 21:01:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x1) [ 127.289219] binder: 18649:18652 ERROR: BC_REGISTER_LOOPER called without request [ 127.300345] binder: 18651:18657 got transaction with invalid offset (0, min 0 max 0) or object. 2018/01/25 21:01:53 executing program 6: syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 2018/01/25 21:01:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000271000-0x4)=0x0, &(0x7f0000d95000-0x4)=0x0, &(0x7f0000c78000)=0x0) r1 = getegid() r2 = syz_fuseblk_mount(&(0x7f0000349000-0x8)='./file0\x00', &(0x7f0000fde000)='./file0\x00', 0x0, r0, r1, 0x8000, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000153000)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffdd2, &(0x7f0000406000)=[@ptr={0x70742a85, 0x0, &(0x7f0000ef4000-0x1)=0x0, 0x0, 0x0, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000a16000-0x1)=0x0, 0x113, 0x3, 0x32}, @fd={0x66642a85, 0x0, r3, 0x0, 0x2}], &(0x7f00004fb000+0xdb9)=[0x38, 0x0]}, 0x2}}], 0x221, 0x0, &(0x7f0000009000)=""}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000789000-0x18)={r3, &(0x7f000076d000)="eca7723f5db4a7405ccd2485f9a16351a545805d37d50d1f28622053380e7944b93d9896ec0b2da2040d2e5de69a5eb864b305b0bcc11fbe67c0a75c1a28c5d50acac08ec4a5d6204643ac3bde1f72e2496977c6132b29634d6f95f332c4302c35131dc66d17f0ecafb16221a10a5c73532e91955aea553daa8f8e7a6006ed2e801d33bd6dd9fd117e2952cd67b6b06f15", &(0x7f0000503000)=""/200}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f000055c000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000fa000-0xc)={0x4, [0x6, 0xcd, 0xd1d4, 0x8]}, &(0x7f0000b89000)=0xc) ioctl$TIOCNOTTY(r4, 0x5422) accept4$netrom(r2, &(0x7f0000902000)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000ced000-0x4)=0x10, 0x80800) 2018/01/25 21:01:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) r1 = getpgid(0x0) getpgrp(r1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000bb4000-0xe)=""/14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0xfffffffffffffff8, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{0xffffffffffffffff, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x1) 2018/01/25 21:01:53 executing program 6: openat$vsock(0xffffffffffffff9c, &(0x7f0000445000)='/dev/vhost-vsock\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xeed000)=nil, 0xeed000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000082f000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000955000-0xc)={0x2, 0x200, 0x27d6, 0x20, 0x5, 0x877, 0x9}, 0xc) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000365000-0x4)=0xff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000046a000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000b0c000-0xec)="618545ec3df3b4df9952b78481c38e77e1d0bc80e50dce786a2f9f5f7d18ea64d40f2f19cb92882e5fe29c8d746843387322e485d7eb5a2346b211be3b4a38769aac6c3a6372d907cd466dcac4007d0a647049fb91ee40062a0288dab35c49b7bc18fbe38606efb094c3359677037e65287c3cbeeecee3cff0e4430a1afc0d708932cf72f50dc39e31229b1d8b2f042a02352b3e38f5df79a56e6afed3831c0e36faec51b6c829f34680b5579a07019ec4d89fb46d89f6388947365c0aab2181279fd3d37c988167f7f30851b8bf5215b51927469cc4ea8a21daf1d565601a73b923ad5413fd42b3c4f78bdd", 0xec, 0x40000, &(0x7f0000886000-0x10)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000edf000)="", 0x0, 0x0, &(0x7f0000eea000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000431000)="0fe2eb6a355e881c826942dc98c956ad37a2dfa2fa16c30a0cbf255cbe00474212e2ba0b7e7e1611", 0x28) r2 = openat(r0, &(0x7f0000ab7000-0x8)='./file0\x00', 0x12241, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000006c000)={r2, &(0x7f00002a3000)="c8ea55fd0dfb546a4bb25df3650750da70f0543ba3982f8966725661d5feaf05ace24001184e51973ca7b730cce7f81090b7da9fc31a3a24a6be527e68c20af2ee17f1bf122afba676298f59f8e6f5249df69999a0c71eb590ffe58c6499b5e4ae8bdc39858142577be3819b5f4ec0f4b4ec1d0770ccf2d9", &(0x7f00006ef000)="15398a9225984fa1f70674622b29e4aaa2b0f0cd27f7fada4f3e42c666374c4d7178b0fadc80d162334f959308c8933ae3f809943fb3b27aecb143bd3fba0b4986e61120ecf9626095589f6575a101cb01cb9113552edb543a4cb3545b85722ec061c4ef6955a3ff62600d4cb4d81acf7d26344e091f5ceb6fd08026b1558547a0d51cebef78b11a9a64006bcc41db72dbe5a8b431a6f5838804c6b9f58e03938acf2c787bcd1dccacd8141fe27fa88d34e72f60bbc3fe4348f60f89e7341279ef21e91101", 0x0}, 0x20) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000eec000-0x62)='-', 0x1) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f00009fe000-0x51)=""/81, 0x51, 0x0}, 0x40002106) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 127.300775] binder: 18650:18659 got reply transaction with no transaction stack [ 127.300784] binder: 18650:18659 transaction failed 29201/-71, size 0-0 line 2703 [ 127.302659] kauditd_printk_skb: 25 callbacks suppressed [ 127.302667] audit: type=1400 audit(1516914113.349:739): avc: denied { prog_load } for pid=18650 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2018/01/25 21:01:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{0xffffffffffffffff, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x1) 2018/01/25 21:01:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) r2 = open(&(0x7f0000766000)='./file0\x00', 0x180, 0x3) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00003e0000)={0x7, &(0x7f0000e49000-0x38)=[{0xf3a3, 0x81, 0x0, 0x400}, {0xff, 0x40, 0x3, 0x7ff}, {0x9, 0x100, 0x100000001, 0x3}, {0x1, 0x67a, 0x9, 0x9}, {0x3ff, 0x9, 0xffff, 0xfffffffffffffffa}, {0xfffffffffffffffa, 0x24000000, 0xff, 0x5}, {0x0, 0x0, 0x1ffc00000, 0x0}]}) membarrier(0x11, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000495000)='/dev/sg#\x00', 0x8000, 0x101000) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) prctl$setfpexc(0xc, 0x80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 127.323230] binder: 18650:18660 got reply transaction with no transaction stack [ 127.323240] binder: 18650:18660 transaction failed 29201/-71, size 0-0 line 2703 [ 127.323711] binder: 18646:18653 got transaction with invalid offset (0, min 0 max 0) or object. [ 127.323747] binder: 18646:18653 transaction failed 29201/-22, size 0-8 line 2966 2018/01/25 21:01:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = memfd_create(&(0x7f00001a0000-0x24)='proc\'eth0[ppp0em0trustedusersystemp\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000784000-0x8c)={0xffffffffffffff00, 0x9, 0x9, 'queue1\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000432000)={{0x1, 0x6}, 'port1\x00', 0x2, 0xb0000, 0x7ff, 0x5, 0x1000, 0x0, 0x5, 0x0, 0x1, 0x10000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 127.331387] binder: 18649:18663 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 127.332344] binder: release 18644:18658 transaction 963 out, still active [ 127.332349] binder: undelivered TRANSACTION_COMPLETE [ 127.332678] binder: release 18644:18658 transaction 961 out, still active [ 127.332684] binder: undelivered TRANSACTION_COMPLETE [ 127.335581] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.335593] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.343305] binder: 18651:18664 BC_ACQUIRE_DONE u0000000000000000 no match [ 127.343315] binder: 18651:18664 got reply transaction with no transaction stack [ 127.343323] binder: 18651:18664 transaction failed 29201/-71, size 0-0 line 2703 [ 127.344306] binder: BINDER_SET_CONTEXT_MGR already set [ 127.344315] binder: 18647:18666 ioctl 40046207 0 returned -16 [ 127.357238] binder_alloc: binder_alloc_mmap_handler: 18649 20000000-20002000 already mapped failed -16 [ 127.357930] binder_alloc: 18647: binder_alloc_buf, no vma [ 127.357953] binder: 18647:18666 transaction failed 29189/-3, size 40-0 line 2903 [ 127.362080] binder: 18649:18663 ERROR: BC_REGISTER_LOOPER called without request [ 127.364894] binder: BINDER_SET_CONTEXT_MGR already set [ 127.364904] binder: 18649:18652 ioctl 40046207 0 returned -16 [ 127.371231] binder_alloc: 18647: binder_alloc_buf, no vma [ 127.371263] binder: 18651:18664 transaction failed 29189/-3, size 0-8 line 2903 [ 127.377395] binder: 18671:18674 got transaction to invalid handle [ 127.377404] binder: 18671:18674 transaction failed 29201/-22, size 0-4294966738 line 2788 [ 127.381187] binder_alloc: 18647: binder_alloc_buf, no vma [ 127.381219] binder: 18646:18667 transaction failed 29189/-3, size 0-8 line 2903 [ 127.381928] binder: undelivered TRANSACTION_ERROR: 29189 [ 127.382131] binder: release 18647:18654 transaction 962 out, still active [ 127.382136] binder: undelivered TRANSACTION_COMPLETE [ 127.382164] binder: send failed reply for transaction 961, target dead [ 127.382172] binder: send failed reply for transaction 962, target dead [ 127.382181] binder: send failed reply for transaction 963, target dead [ 127.385085] binder: undelivered transaction 966, process died. [ 127.418804] binder: 18671:18682 got transaction to invalid handle [ 127.418819] binder: 18671:18682 transaction failed 29201/-22, size 0-4294966738 line 2788 [ 127.431502] binder: 18677:18680 got reply transaction with no transaction stack [ 127.431510] binder: 18677:18680 transaction failed 29201/-71, size 0-0 line 2703 [ 127.483288] binder: 18677:18684 got reply transaction with no transaction stack [ 127.483298] binder: 18677:18684 transaction failed 29201/-71, size 0-0 line 2703 [ 127.485719] binder: 18686:18688 ERROR: BC_REGISTER_LOOPER called without request [ 127.487310] binder: 18686:18688 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 127.508483] binder_alloc: binder_alloc_mmap_handler: 18686 20000000-20002000 already mapped failed -16 [ 127.509180] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.509192] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.515490] binder: BINDER_SET_CONTEXT_MGR already set [ 127.515500] binder: 18686:18693 ioctl 40046207 0 returned -16 [ 127.518807] binder: 18686:18688 ERROR: BC_REGISTER_LOOPER called without request [ 127.520234] binder_alloc: 18686: binder_alloc_buf, no vma [ 127.520255] binder: 18686:18693 transaction failed 29189/-3, size 24-0 line 2903 [ 127.542498] binder: undelivered transaction 976, process died. [ 127.543550] binder: 18694:18696 BC_ACQUIRE_DONE node 978 has no pending acquire request [ 127.543568] binder: 18694:18696 got reply transaction with bad transaction stack, transaction 979 has target 18694:0 [ 127.543580] binder: 18694:18696 transaction failed 29201/-71, size 0-0 line 2718 [ 127.568209] binder: BINDER_SET_CONTEXT_MGR already set [ 127.568220] binder: 18694:18696 ioctl 40046207 0 returned -16 [ 127.568285] binder_alloc: 18694: binder_alloc_buf, no vma [ 127.568307] binder: 18694:18698 transaction failed 29189/-3, size 40-0 line 2903 [ 127.580392] binder: undelivered TRANSACTION_ERROR: 29189 [ 127.580568] binder: release 18694:18696 transaction 979 out, still active [ 127.580573] binder: undelivered TRANSACTION_COMPLETE [ 127.580581] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.580599] binder: send failed reply for transaction 979, target dead 2018/01/25 21:01:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) socketpair$ax25(0x3, 0x2, 0x7, &(0x7f0000198000-0x8)={0x0, 0x0}) mount(&(0x7f0000d88000-0x8)='./file0\x00', &(0x7f0000223000-0x8)='./file0\x00', &(0x7f000033d000)='gfs2meta\x00', 0x10c0010, &(0x7f0000f36000-0x71)="e3b3b7c42d51ca8c905ab27afe4618ec73839fad89bbd5a140e43171376c887a1b2f1e400528a38601c18db54e2cccdbcbabf0ff0a8298e5cb6f9328d5663138fdd5f448aea298452abbb80f16ca9473f8746c588f4f98d5c1e89d6a9ab33bc704122cfda1af35f98e6f2df9fafd46db7b") creat(&(0x7f0000be5000)='./file0\x00', 0x20) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00008e3000)={0x6, r0, 0x1}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00001a5000)={@generic={0x4, "f3b3e2811759bfb710dc49aa332fbf6a4179218d1574d547994cf80a49362c0dfa9fc90a75acb9cb844c4e1143477865c27a8006d8866fe27a68e81300ab39283f398c4933253fc00427f79cf05125595485f49e26aabd5e451b063c6b945ec5649c900fa2c5a5732dca31338510298cd135d21f29c2ba6feef3aeded1d5"}, {&(0x7f00006cf000)=""/164, 0xa4}, &(0x7f00007a0000-0x1)=0x0, 0x0}, 0xa0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00005df000)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00008d0000-0x1000)=""/4096) 2018/01/25 21:01:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000095000-0xd)='/dev/binder#\x00', 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000b53000-0x8)=[0xfff, 0x81]) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f000030d000-0x8)={0x0, 0x1ff}, &(0x7f0000831000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000d66000)=@assoc_value={r2, 0x8}, &(0x7f00006ad000)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000254000-0x4)=0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000a7f000-0xd)='/dev/binder#\x00', 0x0, 0x400800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00004b7000-0xe)='/dev/admmidi#\x00', 0x257, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000f9c000-0x8)=0x10f002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000cc5000)='/dev/vcs\x00', 0x2a8040, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000073000)=0x1) 2018/01/25 21:01:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x59, &(0x7f0000fa8000-0x68)=[@ptr={0x70742a85, 0x0, &(0x7f00003ab000)=0x0, 0x1, 0x4, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000874000-0x1)=0x0, 0x1, 0x0, 0x17}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = msgget$private(0x0, 0x5b0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000e7c000-0x1000)=""/4096) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000a16000)={0x0, 0x0}) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000428000)={0x0, 0x0}, 0x8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000099000)='/dev/hwrng\x00', 0x60201, 0x0) r4 = syz_open_dev$mice(&(0x7f0000d0a000)='/dev/input/mice\x00', 0x0, 0x12000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00005be000-0x14)={0x0, 0x10000, 0x6, [0x2, 0xffffffffffffffff, 0x676, 0xfffffffffffff918, 0x5, 0x3]}, &(0x7f000028d000)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00001d4000-0xa0)={r5, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xad4, 0xffffffff, 0x6, 0x8, 0x0}, &(0x7f00000b0000-0x4)=0xa0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f000039b000-0x108)={0x0, {{0xa, 0x2, 0x4, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) 2018/01/25 21:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{0xffffffffffffffff, 0x9014, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x1) 2018/01/25 21:01:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000924000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 127.943262] binder: 18651:18657 transaction failed 29201/-22, size 0-8 line 2966 [ 127.953610] binder: undelivered TRANSACTION_ERROR: 29189 [ 127.959167] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.964678] binder: undelivered TRANSACTION_ERROR: 29189 [ 127.970166] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.979234] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/25 21:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r1, 0x0, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x1) 2018/01/25 21:01:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00005c7000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000b00000-0x4)=0x0) getresuid(&(0x7f0000938000-0x4)=0x0, &(0x7f00004e4000)=0x0, &(0x7f000079d000)=0x0) stat(&(0x7f000058a000-0x8)='./file0\x00', &(0x7f00004bd000+0xd00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f000086d000-0x8)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000cd000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000464000)=0xc) sendmsg$netlink(r1, &(0x7f00008ed000)={&(0x7f00006e7000)=@proc={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000ec0000)=[{&(0x7f0000ab0000)={0x1c, 0x3d, 0x200, 0x1, 0x3, "", [@typed={0xc, 0x35, @fd=r0}]}, 0x1c}, {&(0x7f000067e000)={0x20c, 0x2b, 0x10, 0x2, 0x0, "", [@generic="619a1e845012da2689aeab4a1dd61e06376ead20459aa80578cd61968b5312a8c32b352108e1cf18c4645a86d730dd9f16142e73013eff57991b9d28a2595fa9bf60d274368e31bc658b395de01ec2d4a90203d6cd7557caf466921c6293cbcfc2f2e1dd8a3869781de56f97591827a27bfa3c785bc4ab84ccc7a40b8279e33ee2db142e451ad6ff13f8c1f509236be6796ca40408af45ac96", @generic="33a93c6e6249b69b9654e8c66abbd7704b1200ee1bc3a7dcd6afa1e24bc36ab4d6ddfaf92dbb797aaf500c80b6aeb0a565b4b363b49184e713ef009120dceee4092b404eeb91a36b66686e61123309ab5aabb9b52d41b587", @generic="669e98af8bdacedbc36656fd260871401aa22a7ec7346b575a62c5712631206361bb2d8e6f7e407ba3f2279a3610359313bc242c3619335e70dbcddc9883311d561c778f69d40fca71be1c540206fb7ab092013826f09d17d55c876700b1a6030947f7632d3a67ba6a1e422b266752ff6b55bb55ea56709eb86b8169630dc0ecdcdc9e1d7ae8096ccf8aea9147fd12c671eac3118bf031d2", @generic="7993c6ff46571ab2f6c69d8b56965d49ec46e6f5ec4341d08f0e1db0a1e880cdee3e7492b217c3648e8be04ae9622da09d8ac5364a82285621081ee1d8ec", @generic="e657fe6b70911c81793caf0c67974653d2cf2b29516a4cd3e55eda75ff6994af6a393b53cf1f53abe251746bbb2da236704d9dfc62"]}, 0x20c}, {&(0x7f000084e000-0x25fc)={0x25fc, 0x24, 0x600, 0x6, 0x3, "", [@nested={0x1200, 0x20, [@typed={0xc, 0x89, @ipv4=@empty=0x0}, @typed={0x10, 0x49, @u64=0xfff}, @generic="9459b83c1c85dc40b7baf58e6e26ae726e92677a096d2b6936786f7b0cb7138ccd8cb8f2418103596ef1d8cc6370c10f587838b752e13d691862e3a0a37145ddd9b1413625f4abc5a882e3b95e9286fd695f8c87ebb3e54fda92d218b2b022f8bbabe3530fd7e5605f0099611fb9", @generic="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", @typed={0x18, 0x24, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}, @generic="f87b0050831a5b3b19a46e7f4304ef3b141618c219a58a3926a4b6695a69f41e3a522cb520a3b2ddf06cee31a51b61c35b3db00490eb8c256afbd1a072a25f3ca1b11da460075dd3791bb6052fe3a34c19b0133a95e9e1a9113f5aba5b1491643ac6e656e02b3fc5d9258d0a6cc27d12f93b59f8ccb86ad796c94e9176b34e88ca558064f43cac33091afdf54327", @generic="26ed92a04b18951626a01f4796d0c8d80fc1fc63a29bb0d998ca87529354a183fe702aa554a034fb59b5405f8f50bcc62fe0497068e5127e297eb66520440a98e714ca1e4ab05039d0967308dd1dd8c81745b5c8e783a8c2a43045493eac806894d0ec78f20c2244f2685a85620929eeb916203a0ae978182b8ee7ffc91f700276ebbd15a65376da6736f25a430ad0f190f6a8440eea3618a5d35e065ef5b1d74c59d1da9ea25ee068bb748de61c8776cfb673cf269aed193f9b666a011d16a68495b102022c485b89"]}, @nested={0x19c, 0x5c, [@typed={0x104, 0x2e, @binary="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"}, @typed={0xc, 0x3, @pid=r2}, @typed={0x18, 0x8b, @ipv6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}, @generic="6b0901ebd7a7ca01cc070582ebed67571760c1f57a2bb5dbc3d87469135804be28d2efc814706702d4f8e61bf2108b90e8961a639a190f13505a6bc910fc8c9f45f71fff3d3c49fd277080eb262f03b3a379e0c04ac5111707802ff57b6b75091eb0cde8d89d8e03b4c68641bb"]}, @nested={0x20, 0x56, [@typed={0xc, 0x95, @ipv4=@empty=0x0}, @typed={0x10, 0x76, @u64=0x5}]}, @nested={0x10e8, 0x34, [@generic="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", @generic="8fe6ef1b3fbf3d20765b4d461ce05c552c02e33e0813338f67dd4e7a77d8640cbd1f76474844d593a1ccfd54f4d70271ec1e6b33475c4d55eb68dcdbe5ec33dc0ad4cce60c73dcb1688689c0f2a274451104a0402bbb9cbaf65b62810f1a62d7e290559fe9848efaca035b7da19a831758a9e18670dbfa17bae2fa29a7a65014c8c90a8bc07b0cd19a6d66fbcf4b7091850263c75cf5672330345adb3d2cfff6b2b548fbefcd14c415dd5283ab", @typed={0x8, 0x27, @void=""}, @typed={0x10, 0x26, @u64=0x0}, @typed={0x10, 0x5, @u64=0x6}, @typed={0xc, 0x53, @ipv4=@empty=0x0}]}, @nested={0xb4, 0x3e, [@generic="c2d57409681deaad49ea6f0bbab4cb8100f1c5173a8f00344dc3bb0a5e895bd33d8fab59e597a84541217700149978aa2dd0c20d57c9356b29891e1459bec65fd3406432e8589af4e202ec8ffb9902bee32488245dfff6b54a4322e998395b8a7e51a82efdc1bffce1fa63027d2e7bba35703696c3800267dd5bd1f9d30944c133f2be321de06ff003ead5f1cc73d830aae63784b6a0db4305", @generic="", @typed={0xc, 0x4d, @ipv4=@empty=0x0}, @typed={0x8, 0x50, @void=""}]}, @nested={0x2c, 0x79, [@generic="3c4fec4c9381b3f97adfa59356e679b12f0da4495f6b801328b6", @typed={0xc, 0x27, @pid=r3}]}, @generic="e6159062d5a0c790a6287f7f69c6272ca552d268958a1204e4af2d5363586160d9491434c6a4bf7717ed030a2e2972c52bb1723b555db769625d8ecb483ee0074c1203262e66f42a8a4df8011c34", @typed={0xc, 0x49, @u32=0x0}, @typed={0xc, 0x27, @ipv4=@rand_addr=0x8}]}, 0x25fc}, {&(0x7f0000d92000-0x2020)={0x2020, 0x33, 0x11, 0x1, 0x2, "", [@generic="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", @typed={0x10, 0x5e, @u64=0x3e7c}, @generic="9f86f179851bd5943e7790bb850aae5f7c985ca7589a62b189c24c572cbc5a4d2bf4f82b98fb1d3414433ae23bbf05bc394c429fdd7d11a9340803101023004360c63cfa129b349d8ebc0df7721c5da4b93778933cf4860771eeb25b24c4d146d4632d1c9f17523ff72406675b43ac153ee701a9c556e49353a5cfb650c4e830857610b295974738cdd64f904a6b3d8abf87f6efa8a13f2146685fb6685aa32262e17bac078fee360ecbc7714a82c5da70e1bedaf65f252e7e76f419ff03e6fa07dd98b17c6ca671e4ff482d2f4eca0a852899cc4162968d0be4bed09c1e334b60603baf05f040f373c9c517b17e61ba8bbea559e20b77e9ac191bbf2144924f2bd5a850b6ab6976fdeda2d2f6fb144dc07d07706a19f89f0b95bb5ae4fde8e61ed8a35c1db1d6bd3341280a567ae58104f5d763ea1d7386bbdbdec1cbb1f2ed279793b28f1f097063ee037b08803dabbc7bee622b5312bbc39291d0eba3b8de20b1e0f667736ce447ec5dc784b9bb1cd05b7a532262d5b9ba2f4722b3716ecfefa52f2c8b5e4a17457d7c8434596f89dcb476a7373864a3110c025e7bdeedf179e0d3bc315bab4e97aa1566f0e83ba3b4c6094e66b447aef82f9f4156a4b5acad98457cc1fe8332a7339c3695b45f33507d0237c5ff16f6d3c3eba48581a7bd1b4c16041291c6a0487573d533864e08597a5e42f9ddfd8e974024ba25bdaa55fc91debc503c7b5e15460a43e1eb5bf4d442a029b0aa2a89edeec34e7025079900eb431eb7fc3ace33d8870353f94afef68deeb4997995883863ac6b6710970c493b52b30d6b7a018334cce0f69a9ee6305929ddf7d6b97c606e23f3a9d3addc31adf5747e00e85133534e17da990335767d593890c924f6a693448a83df07e710c887124e3f96eafcf41283e2b92da81b32450ca99c077f20498d8da7359ccf4f19ae89426bd6f25f1e03757bd983a628f27310b1b7631c3c4a05392bc12e0f06e1e3a866b8f43ed2fe96fa8403baf493ae410bd2a591d6d776eaedfb7ee4e4a9612f98cf0c38e4cc2253350fc30c6744123bbea551b30d09a82bdc2fd7a9b1e9d42666d2e7140c5a5eb26e3ceb971a36ba6cd51c766afad50a600946c8e663d26cf31c96571b0e89361bf39c3b2f8dc199b884804e8945b3f2a823228744aa5f313df3a5d96d0852fd7a5ee9c9ca22caee9535be8454261b9ff3ee2488eacabbd9a9e088604cb769024119eebe206d59391e5f8d76a0f3e6efae3214c380220e19d976ea67865738cf9e9a0569610bdce82b7130c1c652c5dbb5de35d4a75440afe5d42bb30d6a6d24c4960de4e0594b3e7bdadc55269a85f1efee1934b7a35708e8da831e9baa099a118af3e6deff6b8134060a3c72ae6e1a214a6cf3d2aa9ac2dacc691cbdd75454fb1f466a07c198200866d033af49f0cf81cf14fcb4854817cf6c1a50a04bb71e0f1bc46b7a5e78f2238d1a1a950c3bf9a00913f29744b27c372dd39fa8122d7140f5bea6fb37e0d4a4b91bac4defd174daa17444f84bd9d89dca1646efd2ba26c7dbaa708f9e25bd7436d1a368044976b79f1b941ec7b4a9abe57139e3696c25e3d5da7f7cbe0c5b025a8ab3ea39a52d51b13ff65721599c57d65bc844d4cc6df3012c5ec276affcce73ef7ff0bfbbe53a06aa9c76aa472f9b39ddaac3498692bbab78d3bbd7ae698ddcaae52f6dd990176e69bac0120640b2f9dbc5a75aedd308c9881c692d21b14179a4a714413e4d259569fbceeec8f2938345a1266fa2819d0303999ceedcdfcf8469709bdd20e2e2a355e33a57da47a94bd2a7260f68f444fca898a3dd78bb2780247d6ddc95bd583addf37b813f5b9b8a460e59670bd2f4250ccee72bf3f48709d365768089185f3c74a38aa598106d73c554911a1225aae96480ab3d5d1496431cca53f97ae602f7b2532179734b24461de5afc363fbe5f48bb3ae5481207ec75bdc34b873cc2f2a9ec0e24e2b007799b1a6c27370c121edec6e8319ba1121d824e50df8c675911589700921a8ecef734c5c8743bc354324cf75bf4198dc6459be31d1dee97a80df34629d76b05749163df79d99701aaa052c8a281a4c259f406f7bb98d499c061d8d083e7747fa272ce12bff4c10dde82affca06abd7f364c4440cf3eb4a575fd2d8aaeedc9ec1b3fa3777db0901e478ef87353c8595552186a1f941ab0057e25e315f3cfbe66096ab9ebf287677a7484c21bbf2e6027361a6c6b9bcc7822d1c6018df7881eecdc1f126913ccad58437a5a77b6423c5a0773ea6749e81ea93f5bfe61906f3542d81b194bc150b188901c6622db1996c97d83f60b2f2ebbd0305f9e623f761d1b94e526704ee612ab4c2edd09af8c323cfb99345ff9593e74a639631e5ba5df158dc381f14b7c81e8e503b85180f2edf1c22c016b561d1b973d55fb8ed3c73ea43c2d693a19b3d04cc505b5fb120aad2b3b1d4c9273143c7c1cce9fc84ab81b7a4fbfb08b45085fb3c9e327c4f7fee73156e16acd1eaba314be392c775754dda732c416e08557a7e0603d7a693829c452b9e5ee066e4b4991953e2aa484843c5484efc4b48532f7e08216a7a9a8d5dac28da3b52b20166c49c3db147efaabad996f7a747ed285f491f3020f9b5ce5561bd522b62c26e5dacb7278d88e1d23e6b6eec49e5cd8406752f909d5789f77faf7cada52e0199aac970c4dfbadeaef1f507211f4eba1afebdb12812c7ce4eeb5558c321b7de85787a89f136915a3f90d391427ee7d719a7b99234c817dd221872889bf802730d32ae2185038fa792827a036340a6c578c4cc9f6760126742be93690b1eb2c75a0f0a33f6ee1c42004caa494c627a8b9aa104e8afb9587f9e6693d87c1fe016ac17fb8d5127a3857028da6388ba733314a6f0756fb20886b70d2a3ecdeb733fe63ff5ffe6383a440a33f38f41db567d0055cf431e7f6cd36294686588be7804d69ccb8425ae73b912d458d354bb6652ff1244acc73c7c4d9a81ae3e5a3cb33ad973b7a8f109cbe8916c1715b889a23dcb704225a7afc3c46768948df58d422678845e588dc1fd9385dde046274c655778115111bce59aacc4b06556ade8d80b819c2cd91241f13f503cb9164ae9b2f4a95afcb22f99b2f57e05304bcfe9f38558043bae511ae21ed07745f33930b5177f25bcb0e8e8304141fe195343c4f299b135c8d2984e840ac81378e1bb7323a12984c4cd21c7891405241b64dd9262101f82eb687fe09e12dd90be6f109c3398decba54cc8d740b2b45044fd249f70d504ce1ac5d427a045f9a251ec15618c0f7deb0c455a45e95beedce7a5630a0287c0c7169b2d1b031754193863609173c88ad2d96ab6a1fef2a786eac6ea018d500c305d273f8eb2f19b74f4db80c84409b55779ba80989c4d84d797b57498f087f16589950752f80b082cb1e28940d69555f68c7fc3085c8af13106ba817aff66be3cad8ec303d444679e465cfef4d6006acbbc5cfa0cf6c094b1f90b42acac21515512243fb77a8534e9741d94b4b6778cce33cc4ca8a4d99d80f4f39968314fc14896808fa2c6de3236053b72917e0c986ee7f0e45f1cd2f51e6c3b037351a819a30eb604b222c9a4d9b55ee3c5697cb8d914203096bec12a4f185a68120f41ca8dec2b4f587ed2342e54a83dcb65e999d16e8126e68ee2038d0b5d0bc728e61f881e03347688e9a799263308de969d28c5b0c555859aa27ee8f2b58340a720e0855f2b915a276e1a81e972815e35a2f7fca5ccda471469ffc5b3c2c6f3082b48aa5660f3badca7817867d890ca16f1dcc1a9a81473255aa070913aa10245ac32207bb22e36c16e5e49055b76e8ccfe7802e974cb3f516fc616dca198b12faf742173ae65c5f4882cabc6b295e4ea7792937bb9d4027ce2edc87669aad6db2efceb27c18d493c2ab77dc61c3ffec0aa60135953652a4f8b8f988db2244b9c00a9c448fa32d59f6c0fae34b625b667fa0316563d4fb6a8a0ced5248448d64bc280f388663a12b48f397043528a1e2a8e66863ed4138099bfd04e82976d3064161e61a407cfaaf157f67b6fc7d02e69526be3553fcabd8b8d0dc3fd04c66aeeb51f142d2fa6f49778323c580351b7d986ec85d12802d20cdcbf5f7f0e11f1333a7111c279f47a8c0e0b51b2c8235303861655f0b1a6dc16ca84681dcae39351d6b8f25cd6c3188b7a74d8d3f2cb15cbd07e0c8b32542c2968f5490ff05c0338d82fd62928027d31ece3bbf25d6adcbbe407eedcf34602127860c4613a4a856bdbdd1b28820bcc0d840e9eab00aa806c3025886beac9ead32d5bbd3848963e657ee60ea21c573a6eb729d6f48ba7fa4c06cb652142062996341e09ba7763d1d7b850153a95f5ca3bdc8943f2b939ff4ed891b4c0d40edfec510f2d63dcbabc6decd7fd07cd76d95fccf6d689f528eb3dfd8406528867ec7de67562b6723a22d782f67a9959f1ec872f67c322e0c930e6a68f34355ec564b5c2c74a97c11661f8a314d8b1218080a5410b1308bcd976dacd0cdf92e860835d909b17aebe904c3a220e345925282ec5bd64aa9c25a879307a9c68b8b25b5eba0962678e56337336ab56de371c8c7c9b44eadebb904e91a630d5d4a2037017e730b2977db8517208048f5d4ecfae22aa94f0c79df2056076479d86c43cf63026adf5a0d84d03ef2d9f51a03b99208a5932766119ae30633dde80cf826d5ca8a934cd06778d3dd6a9c0273f148707fbb2c2e0e5bb4f5b4d49694bcbcf0f9772ac29a400ad9d8f142d4ac3b8754d1d4a09a3cfd649a3db7a66cdff30506cf7c665ee658388ae40c5ece6c1cc00855e06598c95aa19dc29a21cda994cb7e910998d56058b486ab714f3679a179a6f717af4ee320a9d21df40f05f2a52adc4a11a40768f8dab75ed3d8cf92eb0e7629351da530c0bdf7fecf99ea606637423e3b3bcd38161ae6290972f508fca975fa6f3d6ec46bb6ae00e0cfa2231270639ef98585aa469edcd8282cb1741974e977efc25f2826560a00b54f81e59800ff5abc4ed2efc0e92808556372f3af95d885581ab9b86c992a462cebfacabdcd290c64af34e7b865175b2693b6cb4aaf885ea8d958defbf63e16af8bbb0af03335a8a1a741287412006d5c7292685734edbdba5f7bbc85001571efc4553d32ea23f38f1786561071fe0e241f94cdba14da7a6667d8ec5590f30a88ccbb84ce30f07aef43b77954f217cad005a6df0d4e2adb34c761799f844816906ec841b5aeba94f5dcb031c96e758dd4c2cc75c3220249e01e6364c1982d4612a3b11ff81384e4f103850b6c37e1aa1c47c9520a0bd66106ae32396a3417893773ebe85c4285dc45bb69d37dd7c804106b00efae24986ba94da636eac26c6445d4fd7f7d480af1adb8dc10a3023f1ec46760653b2a53723718251d898343bfab6d1d497f3abb9e6108b0d021520c517987a158ae3f95e0c618edd2d37179f065899114157ae689dd1be48256d78b45472fc4b0efdd3e17d34ae64d9243325674c0ec6ac49b0440c0253ec5ba19d04474c9c96f30fc7c3ca9124eec67ab64f431f1f7a1c5e0ea94f509b4a953ce64d06524df3f7606a160260b71b5c509e7dc9f66aa639c0e37a1f60751b174695d4969751b03d91a809f459009bd96639c3d3431a2cf8ad9e18ea03f04bbad5c7c3994e11fdde00069654a89ccdfacf9fa7bcbe9e15e2d889ce009ec0e9afde0df98d86ded9d51f3499d7b84ae9a8d5fe5bc13166db60a8a7eba0fb0a69f119221304d1567e87de361300f52f99cce9"]}, 0x2020}, {&(0x7f0000291000-0x4b0)={0x4b0, 0x31, 0x104, 0x7, 0x3, "", [@nested={0x10, 0x5f, [@typed={0xc, 0x89, @ipv4=@rand_addr=0x4}]}, @typed={0xc, 0x75, @uid=r4}, @nested={0x1b0, 0x1f, [@generic="7c9f7b49bf09d106c5b79ddab5ee45ffd207f84873c69f8e0dbddfa07417ef69b97f8cd42415e4f937e5dd8b0af91e5145c203fcf72abaf53176733e5c7d577344f21cef1a879cbe20171b3d6b199eb4d1dbea24dee0d0e0fa6cbe62a3f9471b04cc90f6cd4554457e6792b5a5ca056f4f64065de0ed07b58b9020321d1c4b4ca8172c8fe9c4853d1a76b55ae1f46077ff790bf933c1c984f7a3bb677f8f2ddca8edf9c20d81cc46ec8732578273ed843d3fe256ffc02c85", @typed={0xc, 0x6d, @uid=r5}, @generic="8b25c78d16ad635b34ae44ed36348220b58e8717d77dd1c82bdf6ce049f670aa67af283e0908f284cf71d176faca7f53e408715616f029bb3b43a7a79f6e4d73133c6bc3b81651c5a0efd5b45d984c1c822b6c25acef9c9a0cd78bb7f6c25390cd2bd37d81cbf62d02f882ae72c3420d12f9ca0c3729dfdb4d6290a2bec053b8c939cacba8c0730376de081de5006e72de34a6a49b721e5b85dc59488a3a2446ad55dcefa4961ab228f28c170cc29c58febe4b04091642ab7d83bc99154212bd654fcc3ea59d9091cda077c9f70e502a488bdccabeddf73e95ceb8520020c21af16fac99b649ddd3"]}, @nested={0xc, 0x81, [@typed={0x8, 0x2d, @void=""}]}, @typed={0x18, 0x26, @ipv6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}, @generic="b3bbb5ee8d141aeabeab596164cef84c0309ada0ae689a5d815d3672b7d2883bb9450280e41a4def3246e63c3ffe378c51b822e16185b6fcbeacdffa42f7352e6ec23e6c7ac975ae12438ebd6f7613228d0de403866f53f85a1348551d11accee126dc25d9c9322e395d1affe3449037db880506b7bf5498d830ec49b3a28b8a4eb907491e5d3b9c78d30bd091605d4eb9652408f0ecf8b6e6a4d434b15851becf9dcbc3020ac6f86bc239d6278a74a5bc2110dd5dcec598", @nested={0x1e4, 0x55, [@typed={0xc, 0x72, @str='\x00'}, @generic="e63e2b9bd3f87508295cbdc42a9c59e28e15d457cdb0b9e836c4f1181edc9278b732ba86ebd9ac1dae5dbbe2114ef1245c01489ad73c0266c76ae311a53a0e9aa81b2ced0720141e7f74dd59078a60cc93378a489c615d6a02297c5f3f04dfbe2d3286be24fda3eef2726c5f78441de89cbc74b5c8a5c319e7dbc6ee11fb11d663c2cca88bb200d4dad0a56bd3d147d1d2fb1b38088f0887e22a20d3eedad7ae4e07251c4a739add629c2407d6c85fa9acfeffd1371339a149860339dd5ec7cdf660a6b76cd04ed8e396c4e7e225fe3e8f1981a03d097be253ca81244ef35d965b55c285559b94243e40bba11db7769d3ed083a19fdbd7921a35b16a", @generic="e2989c98f030bf283ca2b8944bd2c02fad0503242b0945d7aaaecdf72fe38521363bd79f0f7b145e0ec426688832d0048505cf3e7c2244d76a68b366d224bdcb74e0f6168bad94a25233060f81a13708af1171133b3e31699ffa4a32bb5046202e84e637aa0bb652cd169be0c63c12f10c0864ba590c61bffaf549f49a1f7f85d2e48f7c842845a8a7c0de0a4ba3caaecc8b5150e1c27570ac2d3c3474641fd5517f73a983d3661065be54e1f35b29931cb0ceeb406a39a5e0c39edb233f621a18cb8d60858734d1e58044c8fa6f0bcd890b62da702d1a"]}, @typed={0x14, 0x65, @binary="23939ff0f335638e2ba8e7"}]}, 0x4b0}, {&(0x7f0000e54000)={0x10, 0x2a, 0x200, 0x4, 0x3, "", []}, 0x10}, {&(0x7f00002f8000-0x658)={0x658, 0x3f, 0x300, 0x1, 0x1, "", [@generic="734af4a9217a95d10df41024bf2c7c7ee37f5080a255be02ffdaaad5747f21489a4df2fcd78c2695e32c0c41bb9400e3a9e8e65ca4c5c54e10d31eeaaf6b8e3ebe65cc396f33ee", @typed={0xc, 0x6b, @str='\x00'}, @generic="aa28af43593d055bc49e899108b3fea2cf8ba93ec2eaa532b87e6d57b02c06e811a3e1d42d2953c12aac6f12a4efaf86b26457e8b83f5701d693f0200b953cffc4eb688909bb46e531d0138f3bb421f83ae8c04f368c10", @typed={0xc, 0x64, @str='\x00'}, @nested={0x1a0, 0x29, [@generic="4633daf581e2304cd80b66222eeebd610d0dd90b42d786063ecca880fbbd45b84b7bd56ca7cb238b989e78ff5261378d6345fac890ff3ffea316bf552ed9fe8e839dc7b1bc6c9ff1909927c57aa61c920c5a2c1aa75f09ae53ad3119a0a17f46ff07cd44de38b113c4842f456a98be61043c6aaa7375cbf61984cce8194dae369413fd4133875d62e70104de13eb0d47d209378c691c38f21268162c0b5de85ff3e7f2e378e16487e368b819b9d363affa90e6cea75490787c3f0dea0a23e721be", @typed={0xc, 0x82, @pid=r6}, @generic="c9fbf37d886a768e3a53c6e6821ff3704ec1b4c7fc37fee7ae6f01f133ea47f02409909971fd081de148ca1dd3ed2e304551c56b6ed2f30e97cb91d6a4a44e6d829db9cedb93da1cfa968171f9e09456f9b0c29f0e91617c9a9a3fd7ff00c37bf277d908b2a53325d56986845de2a8cbcd5e289ef3", @typed={0xc, 0x21, @pid=r7}, @generic="44a1677d2ecc282d92d7ea1963ab3342503bb31a5bd8fc86046ec03e7219117e5b7a049d21cd1220e8099cebc4713f1ddc2cd2160f338091c7b25906feee46e6238dd65887dccbde4367953937e3"]}, @nested={0x3e4, 0x44, [@generic="8cbe5bcdea74a58980c87e0a069009a5dff5887ad595ab09a38653f2bb9edaee5f001a7d50b2d6e22731c2fc714549b11e91abce36ca8bc60f8c9bc090ef626ea4c0be9385b30fafc252ef6b60ce0e4eb32e77ce035d6fa586961a4105b2867a188808fb3626c2f4bba56f84fb288fd28036e5491d60b5f6a8d0dea4f0b74fbb3712e8c113b27e871716da3d8755d3bdeee1a8997d0b108753e941e0d69f7632738eb5af93500d3223f431666e1bca7252960953b9c169f6c49d24c3e718a403ff7eb53dee44d1bb508e1551e83c4280ccfebf7d70bc273db1a9de9bb050afe799c6098ab502d945a2a77932a2", @typed={0xc, 0x5, @u32=0x779c}, @generic="8846cdeb4ba8e791d2a8c5573c203a6798ff3327c303f8727299162c419ba306e7127de6dcbc96b0e7b67161398ea8127ac81d536f631bec0e338faa5c652c3c9496720f551a3244dfc95ffe708a80493c4b154f0c02f21c99cd75d68c1e515e1167b4fca7ed15468dea13fab726d71861a6ea7dc4321a3f7d261bfdbe4fef75549f295697de147cf3dfcfc65360b940ef2259d8e61c4218f9151ef71fcf1ff091db10d8dfcfd07cf525dc", @generic="314cd618dc2332300adb0db7cf4e61049c3c6c332a604c6a84080455fea15e82587b03ff42302f661ed96df5c13a2752c2c7ddafa78a4bcee5c631d8be37de08cebcba180d828d81029f874bb387f03c862ff0af0d3aadfb85957eba5c44fffc6eaa95a1a9791e8ef82345ec039d54c224a827d6714c38425f72770fbbe33e6183ada3d2d6ee26fa98c383fec6a4e2ca555a6b81c70b995686a8c266bb6b763aa8", @generic="ce5573b7a7707078a47cfd6c780c07981800c4b28b73e417d77c6795c430549ae1899152f7b8cce1dcce99911436197c243a309b1442703f238d4308000d07ff6e602023a423088ea05fb5b6ce5d01aeb6de8cf5cc056ae8807ec52d1ed31e09aa13364f7456121067e102fe1c4ad5de141349f425c6807c3bca77f0d61c72517c47c001612cd9e3faef58ad3e8f8debc056e3aeee36ef48324890fa0fb1a8864925955c5538af73b994d7553a424b6fc8a1d39ab32694b9b221a2bbafd8c5f902c6fc16f14932a37e445da4006d", @typed={0x18, 0x4, @ipv6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}, @typed={0x10, 0x39, @u64=0x81}, @typed={0x1c, 0x6a, @str='%mime_typemd5sum}\x00'}, @generic="4749e531db9fb91afd5a48791836d0e09d38d3100c3bbfdc04bc24fe0dfb4419180b9cab43d280be452803de6f3e42165c41a48fff36cf939d4b872375ffea7ff26f4495a4790fc47b526784ed688d10ea35ff0ba917fec2e07e1165d2e0bf0c9d178c303bd30551004b950141250b1f08da167ef0c05cd9466434a2ed9b7afa1966662bbc9ca81426"]}, @typed={0xc, 0x27, @u32=0x6}]}, 0x658}], 0x7, 0x0, 0x0, 0x10}, 0x4) r8 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 128.003895] binder: 18703:18713 transaction failed 29189/-22, size 0-8 line 2788 2018/01/25 21:01:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00004af000)='/selinux/enforce\x00', 0x10000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) fadvise64(r2, 0x0, 0x80, 0x1) r3 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) mq_timedsend(r1, &(0x7f0000c24000-0x3d)="aed7fa0783512883a806c66dfd3c560e004b8a2b77b3cb5062a69219fd7c0ed0eb0a87284d4c4cff9ebab39e0382234995fcb9ff533a125f067523d8fe", 0x3d, 0xfffffffffffffe00, 0x0) r4 = getpgid(0x0) r5 = getpid() kcmp(r4, r5, 0x0, r0, r0) 2018/01/25 21:01:54 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000209000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000001000-0x60)={0x0, 0x0, 0x2, @tid=r0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:54 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f000058a000)='/dev/hwrng\x00', 0x20001, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x3, 0x0, &(0x7f0000bbe000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sync() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000996000-0x28)={0x5, 0x0, 0x5, 0x80000001, 0x7}) 2018/01/25 21:01:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000f1a000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000123000)=0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r3 = syz_open_dev$audion(&(0x7f0000e3e000)='/dev/audio#\x00', 0x5, 0x101001) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00006bd000)={0x0, 0x101, 0x30}, &(0x7f0000e7e000)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f000098d000)={r4, 0x5, 0xffffffffffff7512, 0x8000000005, 0x10000, 0x100000002}, &(0x7f0000ab5000-0x4)=0xffffff82) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00003d6000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00004a7000-0x110)={{0x8, 0x7, 0x10000, 0x6, "791d9f5822c210abfff5feb168d24b7438392af97fd802bceba190cb7e32342f83de1ba2af576bfb2932520a", 0x80}, 0x0, 0x0, 0x4, r5, 0x0, 0x4, "7008dd70882a0e767cfb97786cf2011325192d8eeb14c84abfa55c3b618fa32570266afda5165dc9148ff37a839bd2c9eb0e693358d505110745c8b9cd6b6ba1", &(0x7f00003d9000)='-wlan0\x00', 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x35d6, 0x73, 0x9, 0x3f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_setup(0xdd, &(0x7f000007e000)=0x0) io_cancel(r6, &(0x7f000038e000)={0x0, 0x0, 0x0, 0x6, 0xfff, r2, &(0x7f0000810000-0x2c)="ae647a0840e6db9a80de594492435d20f7ae09191410ca60380a346cbcced7f8be846b19c542538f759fa94f", 0x2c, 0x5, 0x0, 0x1, r3}, &(0x7f0000be1000-0x20)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x1) 2018/01/25 21:01:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000990000-0xb)='/dev/audio\x00', 0x100, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000a78000)=@req={0x81, 0x6, 0x37, 0x7f}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 128.006340] binder: 18701:18706 transaction failed 29189/-22, size 0-0 line 2788 [ 128.011840] binder: 18700:18711 got reply transaction with no transaction stack [ 128.011888] binder: 18700:18711 transaction failed 29201/-71, size 0-0 line 2703 [ 128.021132] binder: 18709:18712 BC_ACQUIRE_DONE node 984 has no pending acquire request [ 128.021152] binder: 18709:18712 got reply transaction with bad transaction stack, transaction 985 has target 18709:0 [ 128.021164] binder: 18709:18712 transaction failed 29201/-71, size 0-0 line 2718 [ 128.049899] binder: BINDER_SET_CONTEXT_MGR already set [ 128.049910] binder: 18709:18721 ioctl 40046207 0 returned -16 [ 128.058099] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.058130] binder: 18709:18712 transaction failed 29189/-3, size 40-0 line 2903 [ 128.061575] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.061608] binder: 18703:18713 transaction failed 29189/-3, size 0-8 line 2903 [ 128.063997] binder: 18703:18722 BC_ACQUIRE_DONE u0000000000000000 no match [ 128.064041] binder: 18703:18722 got reply transaction with no transaction stack [ 128.064050] binder: 18703:18722 transaction failed 29201/-71, size 104-89 line 2703 [ 128.083057] binder: 18700:18720 got reply transaction with no transaction stack [ 128.083066] binder: 18700:18720 transaction failed 29201/-71, size 0-0 line 2703 [ 128.090683] binder: 18725:18728 ERROR: BC_REGISTER_LOOPER called without request [ 128.092466] binder: 18725:18728 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 128.104082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pig=18726 comm=syz-executor0 [ 128.106172] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.106204] binder: 18723:18726 transaction failed 29189/-3, size 0-8 line 2903 [ 128.130243] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.130267] binder: 18729:18736 transaction failed 29189/-3, size 0-0 line 2903 [ 128.137395] binder: BINDER_SET_CONTEXT_MGR already set [ 128.137407] binder: 18730:18735 ioctl 40046207 0 returned -16 [ 128.140979] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.141060] binder: 18730:18735 transaction failed 29189/-3, size 40-0 line 2903 [ 128.142309] binder: BINDER_SET_CONTEXT_MGR already set [ 128.142318] binder: 18725:18737 ioctl 40046207 0 returned -16 [ 128.145327] binder: 18725:18728 ERROR: BC_REGISTER_LOOPER called without request [ 128.145383] binder_alloc: 18725: binder_alloc_buf, no vma [ 128.145406] binder: 18725:18737 transaction failed 29189/-3, size 24-0 line 2903 [ 128.160217] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.160243] binder: 18729:18742 transaction failed 29189/-3, size 0-0 line 2903 [ 128.163342] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.163373] binder: 18739:18743 transaction failed 29189/-3, size 0-8 line 2903 [ 128.185690] binder: BINDER_SET_CONTEXT_MGR already set [ 128.185701] binder: 18730:18748 ioctl 40046207 0 returned -16 [ 128.188535] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.188567] binder: 18730:18735 transaction failed 29189/-3, size 40-0 line 2903 [ 128.188607] binder: 18730:18748 BC_ACQUIRE_DONE u0000000000000000 no match [ 128.188616] binder: 18730:18748 got reply transaction with no transaction stack [ 128.188625] binder: 18730:18748 transaction failed 29201/-71, size 0-0 line 2703 [ 128.197363] binder: 18747:18750 got reply transaction with no transaction stack [ 128.197371] binder: 18747:18750 transaction failed 29201/-71, size 0-0 line 2703 [ 128.213259] binder: 18747:18751 got reply transaction with no transaction stack [ 128.213267] binder: 18747:18751 transaction failed 29201/-71, size 0-0 line 2703 [ 128.214403] binder_alloc: 18709: binder_alloc_buf, no vma [ 128.214432] binder: 18739:18743 transaction failed 29189/-3, size 0-8 line 2903 [ 128.521517] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.527025] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.532564] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.538135] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.543595] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.549172] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.554647] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.560242] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.565705] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.571194] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.576696] binder: release 18701:18706 transaction 988 out, still active [ 128.583639] binder: undelivered TRANSACTION_COMPLETE [ 128.588764] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.595316] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.600801] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.606264] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.611804] binder: undelivered transaction 994, process died. [ 128.617911] binder: release 18709:18712 transaction 985 out, still active [ 128.624854] binder: undelivered TRANSACTION_COMPLETE [ 128.629970] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.635434] binder: send failed reply for transaction 985, target dead 2018/01/25 21:01:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) fcntl$getown(r0, 0x9) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c9d000)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) r2 = memfd_create(&(0x7f00008a9000)='\x00', 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00002ef000-0x4)=0x8, 0x4) 2018/01/25 21:01:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000c65000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000628000)={0x0, 0x78, 0x3ff, 0x7, 0x5, 0x1d1, 0x0, 0x68, 0x11000, 0x6, 0x7, 0x8, 0x4e, 0xfffffffffffffc01, 0x4, 0xffffffffffff8001, 0x153, 0x400000, 0x7, 0xff, 0x2, 0x2, 0x7, 0x800, 0x0, 0xffffffffffff0000, 0xfff, 0x4e8d, 0x5, 0xb94, 0x8, 0x8001, 0x9be5, 0x0, 0x0, 0x8, 0x1, 0x7ff, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000c3d000)=0x0, 0x1}, 0x10100, 0x9, 0x0, 0x6, 0x1, 0x81, 0x100000001, 0x0}, r2, 0x81, r0, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00002d4000)='/dev/audio\x00', 0x6107c2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00006c8000-0x10)={&(0x7f0000337000-0x8)='./file0\x00', 0x0, 0x0}, 0x10) accept4$unix(r3, &(0x7f0000f20000)=@file={0x0, ""/4096}, &(0x7f0000559000-0x4)=0x1002, 0x800) 2018/01/25 21:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x1) 2018/01/25 21:01:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x2000) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x7}, &(0x7f0000ac8000-0x4)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00004d9000-0x4f)=""/79) 2018/01/25 21:01:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) fcntl$setflags(r0, 0x2, 0x1) 2018/01/25 21:01:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = syz_open_dev$vcsa(&(0x7f000091d000)='/dev/vcsa#\x00', 0x9, 0x80000) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000c9f000-0x4)=0x80000001) 2018/01/25 21:01:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000bcf000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000121000)=0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000a32000-0x8)={0x0, 0x3}, &(0x7f0000dc4000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000975000-0x4)=@assoc_id=r2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 128.642116] binder: send failed reply for transaction 988, target dead [ 128.648841] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.658345] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.663897] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x1) [ 128.693494] binder: 18759:18762 transaction failed 29189/-22, size 0-8 line 2788 [ 128.707454] binder: 18760:18767 got transaction with invalid offset (0, min 0 max 0) or object. 2018/01/25 21:01:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00005ec000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xbfc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000af0000)={0x0, 0x0}) futex(&(0x7f0000d9e000-0x4)=0x9, 0x4, 0x2, &(0x7f0000109000)={r0, r1+30000000}, &(0x7f0000f7e000-0x4)=0x3, 0x401) 2018/01/25 21:01:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00003b1000-0x12)='/dev/snd/pcmC#D#c\x00', 0x9, 0x101002) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000ca8000-0x8)={0x0, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000aee000)=0x1f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x0) 2018/01/25 21:01:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x7f8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) r2 = openat(0xffffffffffffff9c, &(0x7f000037b000)='./file0\x00', 0x28000, 0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f000087f000-0x8)={0x0, 0x8000}, &(0x7f0000f90000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00008d2000-0x4)=r3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000578000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0xfffffffffffffca5, 0x0, &(0x7f000000b000-0x4)=""}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a00000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000fd0000)='/dev/vcs#\x00', 0x2, 0x80) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000462000)=""/18) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r2 = syz_open_dev$usbmon(&(0x7f0000af2000-0xd)='/dev/usbmon#\x00', 0x1000000000000, 0x200401) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000545000-0x2)='-\x00') r3 = inotify_init1(0x7fe) clock_gettime(0x0, &(0x7f000066f000)={0x0, 0x0}) ppoll(&(0x7f0000d13000)=[{r3, 0x8, 0x0}, {r0, 0x1, 0x0}, {r2, 0x200, 0x0}, {r3, 0x1088, 0x0}, {r0, 0x1000, 0x0}, {r2, 0x8040, 0x0}, {r3, 0x4, 0x0}, {r0, 0x100, 0x0}, {r2, 0x4000, 0x0}], 0x9, &(0x7f0000cab000)={r4, r5+30000000}, &(0x7f00006ac000)={0x7}, 0x8) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00008bb000-0x4)=0x0) [ 128.707495] binder: 18760:18767 transaction failed 29201/-22, size 0-8 line 2966 [ 128.709277] binder: 18754:18766 ERROR: BC_REGISTER_LOOPER called without request [ 128.710383] binder: 18757:18765 BC_ACQUIRE_DONE node 1007 has no pending acquire request [ 128.710407] binder: 18757:18765 got reply transaction with bad transaction stack, transaction 1009 has target 18757:0 [ 128.710455] binder: 18757:18765 transaction failed 29201/-71, size 0-0 line 2718 [ 128.725818] binder_alloc: binder_alloc_mmap_handler: 18754 20000000-20002000 already mapped failed -16 [ 128.733191] binder: BINDER_SET_CONTEXT_MGR already set [ 128.733201] binder: 18754:18779 ioctl 40046207 0 returned -16 [ 128.735554] binder: 18754:18773 ERROR: BC_REGISTER_LOOPER called without request [ 128.736463] binder_alloc: 18757: binder_alloc_buf, no vma [ 128.736484] binder: 18756:18769 transaction failed 29189/-3, size 0-0 line 2903 [ 128.739373] binder: BINDER_SET_CONTEXT_MGR already set [ 128.739383] binder: 18757:18775 ioctl 40046207 0 returned -16 [ 128.749657] binder_alloc: 18757: binder_alloc_buf, no vma [ 128.749684] binder: 18757:18765 transaction failed 29189/-3, size 40-0 line 2903 [ 128.755373] binder: 18760:18781 BC_ACQUIRE_DONE u0000000000000000 no match [ 128.755382] binder: 18760:18781 got reply transaction with no transaction stack [ 128.755389] binder: 18760:18781 transaction failed 29201/-71, size 0-0 line 2703 [ 128.755839] binder: 18761:18763 got reply transaction with no transaction stack [ 128.755847] binder: 18761:18763 transaction failed 29201/-71, size 0-0 line 2703 [ 128.762419] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.762707] binder: release 18757:18765 transaction 1009 out, still active [ 128.762712] binder: undelivered TRANSACTION_COMPLETE [ 128.762720] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.762737] binder: send failed reply for transaction 1009, target dead [ 128.774448] binder: 18759:18771 transaction failed 29189/-22, size 0-8 line 2788 [ 128.779509] binder: 18761:18772 got reply transaction with no transaction stack [ 128.779517] binder: 18761:18772 transaction failed 29201/-71, size 0-0 line 2703 [ 128.785843] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.785854] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.786073] binder: 18756:18783 transaction failed 29189/-22, size 0-0 line 2788 [ 128.799449] binder: 18785:18786 BC_ACQUIRE_DONE node 1019 has no pending acquire request [ 128.799468] binder: 18785:18786 got reply transaction with bad transaction stack, transaction 1020 has target 18785:0 [ 128.799478] binder: 18785:18786 transaction failed 29201/-71, size 0-0 line 2718 [ 128.803606] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.804148] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.827180] binder: BINDER_SET_CONTEXT_MGR already set [ 128.827189] binder: 18785:18794 ioctl 40046207 0 returned -16 [ 128.832276] binder_alloc: 18785: binder_alloc_buf, no vma [ 128.832306] binder: 18785:18786 transaction failed 29189/-3, size 40-0 line 2903 [ 128.834130] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.834142] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.843267] binder_alloc: 18785: binder_alloc_buf, no vma [ 128.843296] binder: 18790:18796 transaction failed 29189/-3, size 0-8 line 2903 [ 128.850069] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.850227] binder: release 18785:18786 transaction 1020 out, still active [ 128.850232] binder: undelivered TRANSACTION_COMPLETE [ 128.850239] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.850257] binder: send failed reply for transaction 1020, target dead [ 128.856999] binder: 18790:18796 transaction failed 29189/-22, size 0-8 line 2788 [ 128.861517] binder: 18793:18799 got reply transaction with no transaction stack [ 128.861524] binder: 18793:18799 transaction failed 29201/-71, size 0-0 line 2703 [ 128.873043] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000b64000)='./file0\x00', 0x0, 0x9) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000aaa000)={0x80000000, 0x0}) syz_open_dev$sndpcmc(&(0x7f0000c4f000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000034c000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) clock_nanosleep(0x0, 0x0, &(0x7f0000b85000)={0x0, 0x0}, &(0x7f00001aa000-0x10)={0x0, 0x0}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) tkill(0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0xffffffffffffff6b, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00006dc000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f00008bb000-0x1002)=@file={0x0, ""/4096}, &(0x7f0000960000)=0x1002) prctl$setmm(0x23, 0x7, &(0x7f000023e000/0xc00000)=nil) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00005c5000-0x10)=@buf={0x90, &(0x7f0000c83000-0x90)="2ee303c0830b9d5c3e8c1eceb408c6b4b5e54241c154492b228c7e8bc2d5424b69d225df064e8a661551fc258b042b64fbf65236a462a0632eded23007d0801e29b37582c9e340d8b39d2f4a4bc29bd6322bb1256865dcd446f85b47ab1cbbc3ca476fd955391d34ddb5a7f28597cc452eaf4793118a232f066887b3a590cf9ee2ae5f0e0006a13c3f493d142873d12f"}) syz_open_dev$admmidi(&(0x7f000013d000-0xe)='/dev/admmidi#\x00', 0x100, 0x42) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00005c9000-0x10)={0x4, &(0x7f0000a59000)=[{0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:55 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000682000)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, &(0x7f00003e9000)=0x58, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x100) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r4 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000001000-0x4)=0x0, &(0x7f00008bc000-0x4)=0x0, &(0x7f0000000000)=0x0) fstat(0xffffffffffffffff, &(0x7f000078d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000860000)='/dev/rfkill\x00', 0x80000, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000400000-0x8)='./file0\x00', 0x20002, 0xb8) r10 = epoll_create(0x3) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r12 = socket$inet_icmp(0x2, 0x2, 0x1) r13 = getpid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000099b000)=0x0) r16 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000423000)=0x0, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000d5b000)='./file0\x00', &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000655000-0x4)=0x0) r20 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000d49000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000288000-0x4)=0xc) r22 = gettid() r23 = getuid() getgroups(0x5, &(0x7f0000b65000-0x14)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r25 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/context\x00', 0x2, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00005f5000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r27 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0x2}, 0x8, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r28 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x1)='/dev/ppp\x00', 0x200, 0x0) r29 = fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000df4000-0x4)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000001000-0x4)=0x0) r32 = getpgid(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f00003b8000)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r34 = getgid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r35 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x448000, 0x0) r36 = syz_open_dev$adsp(&(0x7f0000ca4000)='/dev/adsp#\x00', 0xfff, 0x180) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r37 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x101, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r38 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r39 = syz_open_dev$sndtimer(&(0x7f0000001000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r40 = accept$unix(0xffffffffffffff9c, &(0x7f0000001000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000001000-0x4)=0x8) r41 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000d9d000)='/selinux/context\x00', 0x2, 0x0) r42 = socket$unix(0x1, 0x7, 0x0) r43 = openat$hwrng(0xffffffffffffff9c, &(0x7f000088e000)='/dev/hwrng\x00', 0x2000, 0x0) r44 = getpid() r45 = getuid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001000-0x4)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r47 = syz_open_procfs(0x0, &(0x7f0000f09000)='net/ip6_tables_names\x00') r48 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000788000)=0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000fd1000-0x8)={0x0, 0x0}) r50 = socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r51 = accept$packet(0xffffffffffffffff, &(0x7f0000c22000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000001000-0x4)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r52 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x600002, 0x0) r53 = openat$vnet(0xffffffffffffff9c, &(0x7f0000c44000)='/dev/vhost-net\x00', 0x2, 0x0) r54 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r55 = perf_event_open(&(0x7f0000000000)={0x5, 0x78, 0xea, 0xcf, 0x3ac, 0x3, 0x0, 0x1, 0x4810, 0x1, 0x0, 0x9, 0x2, 0x5, 0x1f, 0xc432, 0x7fff, 0x100000001, 0x8, 0x3ff, 0x3b6, 0x8, 0x1, 0x3, 0x319c, 0xffff, 0x7fffffff, 0x5, 0x5, 0xb127, 0x9, 0xb9f, 0x800, 0x6, 0x0, 0xfff, 0xac85, 0x8, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000903000-0x1)=0x0, 0x8}, 0x8, 0x149, 0x2, 0x3, 0x2, 0x1, 0x6, 0x0}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x0) r56 = getpgid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001000-0x74)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000cd7000)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r59 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r60 = syz_open_procfs(0x0, &(0x7f00001d4000-0x8)='net/dev\x00') r61 = socket$inet_icmp(0x2, 0x2, 0x1) r62 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r63 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r64 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x100, 0x0) r65 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000000)={0x3, 0x5, 0x1, 0xffffffffffffffff, 0x0}) r67 = fcntl$getown(0xffffffffffffff9c, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000001000-0x4)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x8, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0]) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in=@loopback=0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000084f000-0x4)=0xe8) getgroups(0x5, &(0x7f0000510000-0x14)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r73 = gettid() r74 = geteuid() fstat(0xffffffffffffffff, &(0x7f00001d2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r76 = accept4$ax25(0xffffffffffffff9c, &(0x7f000081c000)={0x0, {""/7}, 0x0}, &(0x7f0000001000-0x4)=0x10, 0x80000) r77 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r78 = syz_open_pts(0xffffffffffffffff, 0x82) r79 = socket$inet6_tcp(0xa, 0x1, 0x0) r80 = eventfd2(0x8, 0x801) r81 = epoll_create1(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r82 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/ppp\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r83 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/mixer\x00', 0x400, 0x0) r84 = socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r85 = accept4$packet(0xffffffffffffffff, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000cc3000-0x4)=0x14, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000096f000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001000-0x8)='./file0\x00', &(0x7f0000ae6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000254000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r90 = getuid() r91 = getgid() r92 = getpid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00002a2000)={{{@in=@multicast1=0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) getresgid(&(0x7f0000a8e000-0x4)=0x0, &(0x7f00009ca000)=0x0, &(0x7f0000512000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f00008c4000-0x4)=0xc) r96 = geteuid() fstat(0xffffffffffffff9c, &(0x7f000020b000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r98 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40c00, 0x0) r99 = openat$kvm(0xffffffffffffff9c, &(0x7f0000eb3000)='/dev/kvm\x00', 0x0, 0x0) r100 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f000099e000-0x60)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000afe000-0x4)=0x60) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r101 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) r102 = socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r103 = syz_open_dev$dspn(&(0x7f0000001000-0xa)='/dev/dsp#\x00', 0x3f, 0x1) r104 = accept4(0xffffffffffffff9c, 0x0, &(0x7f00008e1000)=0x0, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r105 = accept$ax25(0xffffffffffffffff, &(0x7f0000001000-0x10)={0x0, {""/7}, 0x0}, &(0x7f0000000000)=0x10) r106 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f00001bf000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f0000b5c000)=0x60, 0x800) r107 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000baa000-0x11)='/dev/vga_arbiter\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r108 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400100, 0x0) r109 = syz_open_pts(0xffffffffffffff9c, 0x121000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r110 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000-0x4)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r111 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r112 = syz_open_dev$evdev(&(0x7f0000209000-0x12)='/dev/input/event#\x00', 0x2, 0x80000) r113 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d4f000)='/selinux/status\x00', 0x0, 0x0) r114 = getpgrp(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000292000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r116 = getegid() r117 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r118 = syz_open_dev$adsp(&(0x7f0000001000-0xb)='/dev/adsp#\x00', 0x22000, 0x34000) r119 = signalfd4(0xffffffffffffffff, &(0x7f000045e000)={0x6}, 0x8, 0x800) r120 = socket$inet_udp(0x2, 0x2, 0x0) r121 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r122 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xffffffff, 0x400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001000-0x4)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000bd4000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00004e0000-0x8)='./file0\x00', &(0x7f0000ebf000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000001000-0x230)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f000089b000)=[{&(0x7f0000000000)="e73d726029afff366a54ee7af70bd95c4ba9bc46d57c161b94728ea15762b03ddec299e5b3fda15427eac28836ac3444d66b3a7eb28f7852a05b1e5b9705a4a31c3dc6a7aa4a8944aa5114fbe71bce5235f93ec4dc57286f66a5d0395d8f8325088837700edad137edf925cc5f18e2acd073d800f779d7ab3b5f4b0e4a5ed903df1a6fb9d0b1ae6442f73dd4ce2ddccfca9ab3ad18f14405b1cffcfe933c31bf6b2883fbc956d37ca9895bb439412372", 0xb0}, {&(0x7f0000000000)="2fb2fba36edbba60777c4249f143060ad66fb4e51f778d81739211b9b10c7b556f4697799774b6e7873dcbe94f38e3b6ec9a0382710759b0cf5e265cc454a07bdc43ab5f74b32adaa55c9518b5971e5b741371531a54249ee5e61feb1f5fa66957fcaa3b68661f5a1a1e389626d71f401edebb5662b0ea913b88d16c95d140ed046ab7cf619742a3c91d46724a24ff81a6293b23199098250d52ef30aeaa1b016ea78ae4b34c4763e8a2d5ac90499a8b5719d0f84eb09137c0681c3b8214a3f4884db9aa1b618b0fd3db728387bd4b26b1761de0b0a0152a0672561e5d07398fcca3542208b4b44a2ca4673d9521", 0xee}, {&(0x7f0000f21000-0x62)="3ebb47ff17c337faa05ebb7aa7baa7901d63a4d0d216cdd283a3d06a91b6fcefdff1bc23501328741694ffdda84c1759b086f9aa467dbb8380b7b96aeb0f504e05f9db37ee524dfa231ea42c7dbb72c26d2d1515bcce872561842908c23033e9d01d", 0x62}, {&(0x7f0000000000)="8d33b775ced9bf1bdd7df7972d01d26151326f9da8ab7a9161d0054ef67f132f6bc721ff472cac510a2f32ea335f6fdbd318b563d463e43da4d0e9b19a875f8666374ae19b989848bc88270244e6d8be03d66e210b44b06dddf438a1c73f6ec1ff21564c8f70076e34646bdc52e99971a6fbfd1bf957f229a2e194deeac2bc082049efc23bfeb52ac8be3bcefcad30aa15735c23afe3da56e8ff741caf9b65fbf69d37d4e66060ead1a46017387553bb1fa9e7", 0xb3}, {&(0x7f0000000000)="78c80b5dca9d312eaf7e5416a86a8830d49b1a5008329a710277f6af6e9678fdc5bdf27d377e15aa98524a526c1803019454b6c8d735828e7fba8e4627274611463e16b770caf610ab984fba38f6f2e32f8d3ef90ee6bc762bfc7f77bd7fa4497400fdf48518a094e41a033febf217f2110af944bc357ebcdf19ba0004b534c7afd47c378c9b02be9538976d55dfb0a7909d1883", 0x94}, {&(0x7f0000986000)="f59f1bcf683d10ab099cd7dd4ca029ccf7a92235158b63415ba9455b58fce25ea65826f8758dad4ec3c49614566e8d726bde3bcc3e09fec1a9f80378d781b4e0027a6a6def43e227f14de24ed4f409001fdbc41e77251d8a643a9b4bbb7f983e3ba787e7d15f3d7931e21f55f24ef9dd6ff7a1bd8ae773024e23e36ce9da700da133061162cf1cff4eb44bbb6632380cc821d5fee8fe631c51e8c5a73282abb912d6e86bd676da653f509bb6e09b6d7c2edd7609ede2ced62fa9e3e7898698c8934e69b94beff3e2c220496249210e318dbffb5c1f0997fdf9fafaa73b02d424149bd46e", 0xe4}], 0x6, 0x0, 0x0, 0x0}, {&(0x7f0000001000-0x8)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000000)=[{&(0x7f0000000000)="dcea92f45b23281f1961a02f86129a78adf19ec80d74f2722857909e42fc2c8987946e0a4e738a1e2a19bfddc005f4a22baf9351", 0x34}, {&(0x7f0000000000)="6e792540a239ff59f3f78147b6dd694584939fa1a2ed3c657ae1b5135ee13b463ac44b0987db2be47975e492baccc703f64ae529bcd68a6858733d13faee5a3e5cfed4764167abad954efca7dbe86b846af5bdb7e1da9da52fb8c256ab96792dea23c94d618446c80cf01ab71462e2223b7df9adcbd8b904505ce257cee7a6afb00dbd5136d6c437e3b0b2ef55ee299cd7c469f4a376479f3a06ae85bbb54747e7651224d41fc87ddc705194e39310a8836f6af398075dbaec78322650ad6c775eed41862efbd8baae", 0xc9}, {&(0x7f0000001000-0xb4)="9c02336e44e40ec4d26e354b945a5dea6bcec16fd4999621694227b6a6ff8485839feff19f1510428b712d867b1986abe257a5216a04b2f5b317fe9b706bc9d094ee2b846f7eda7469e9d4d52b841c4a7473a1ddf1e97e51497ed97efef5405242d7da610a2d881933e5c8bb56c285bc86c471262b5f708cfd3134aeb4cb39f55894b26455736124902b7044aaa56a354e544abf3733c6b5a28395a8a88f440b8b99f39758130c2f887594aa5ac40ec01482bee6", 0xb4}, {&(0x7f0000001000-0x56)="3cf4a09c1761f00d234e3697df1d8faf07a75739a201e9335d203e944e5168a5c56b82a7ef88f5c8567b4ef9c8e140d36d7dc997d784ccf05b317e82576956b459458094aab4d109bf4260cac3b760943b285565b358", 0x56}, {&(0x7f0000001000-0xa9)="7732c6dd9b021718331de1f5b3fe1d2a281f888a042c627118f02193b6105fea4ebf1fa840856b282eb71c5bcff7f37a8f95fff65baa22e4cca27a4c4973ece86cec3f026b9ec5be6820df4073948d027d217091ecc12bca1dc602b545b4ff32f2a9708546bd6c5c296010f946a5ef8ae609207581a05de34106a3480722032c8995159a24ea1f68c5f25b479f93d9de5ed8d5b4f108fe775dbbee2646d2d4b8e3619be85b6def0a8f", 0xa9}, {&(0x7f0000000000)="7808cc83b2f455be9567ddb0124f4a4b7f4c0a0e21843b5d", 0x18}], 0x6, &(0x7f00006b1000)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x28, 0x1, 0x1, [r7, r8, r9, r10, r11, r12]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r25, r26, r27, r28]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}], 0x148, 0x20004055}, {&(0x7f0000e38000-0x8)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001000-0x20)=[{&(0x7f000027e000-0xbe)="a8fa0688e22e26586394574c1488b91c77fbbabe492c5e2c81249e4706358590c3ec350296b31ff45e66ab2c82639b729f920cdbea446655ef8f8e597eae63086fc95720ab231b135fea66761d49b7286acc23b0644842efec386d16e05e96a4c36f5354e6fc53268757f1c18b3a7f52a6dd0ef0aa8f8425ad88b29150826dae50d75ead8ee829396bd507579ccf14673af605b560187dd5d71d77f3daad125058a2af4ff98c1b6ffa4d0bd11fcb25d6c1b1cd9818e177c673578a4f3714", 0xbe}, {&(0x7f0000e4b000)="d14013fb1551bfe70632c17739fbf592f26c330783238fd9c6f8b402e2aa6e1d962e575f257483", 0x27}], 0x2, 0x0, 0x0, 0x0}, {&(0x7f0000001000-0xa)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000697000-0xa0)=[{&(0x7f0000a18000)="ac9fcaf95bc43d9f", 0x8}, {&(0x7f0000d1b000)="7413b141025685d339c438d17c8651a77fd45092f7b82fae9b7975ccf1c80f09483d97a0d9622a827535b58db027f547f6c7a75bd4224025216bb38a5d6fd7a4053bc7e0a69d8d54e88e11fcd71707a3d0ed751632e568a9de032f13412a593160470ff4a8888c9b9b297353e835cf22f503b2d05fdc71e914beac5b3f108c50bcb9260f96e1355bd59d76558b505d19004a77c6c0f6d2e345b2023caabe62a97fef67d3ac712d6b02db761bd9f44710f2ea6bb66d925785df038406b0d9a35ea04d9d38f9258115d36748036f93a87a", 0xd0}, {&(0x7f0000000000)="31696c7bc984f53e74b995678becd1278023c709839b265f2fab616f20fe969797d2972aeb3fc27fad1e71a7a3d08e6d66ba018b", 0x34}, {&(0x7f00002f4000-0x96)="6649ad4c7f51ede52061bcc79d98b4d40d4335b5ce83f17fb0010ff9b9073de0c013afb490b75bb0af4040a734cdc00efba3fcd606edb7e5dfca60cb94e10cc154db964cff4150c3d5c3e5b77ce65d1160d0231bcca733605e44942b03a2771976afe9f44d7c128b5ca880f901d4a0d54bd041c2870f8ebba343c6d8a34d06d9ee7495bf861047bab9fc49bbc004ec73d4078584cc6d", 0x96}, {&(0x7f00000d5000)="7d1f181d0854066cee42bbb9a9c453f359cd38a713739ab7d0f85c61fc177c3267b61557334752ae77ab4bc6e14eba80a96ea0a03fa70fb4523a05294dae3e44994077d0eb870aed0a3b3ccab39b93c2568f6c452a55812320ed97ae780e980b81758ff9941a556974b7f860ad79b516dcbed14fc827c0e64774e3df5253683fea2c727accc146185f3ca088ae0761346d3c1ba26efe429e4abfe03357349585f035768638e982f0deb38d82de3b8f9e6a957c3216244fa9fe4144a648a8fdaaf04e63e462074ff86b5e9fec900ddf0e", 0xd0}, {&(0x7f0000000000)="80f8278bee5574b5de1db6af8f85c8cb92c70869e3e3b0fbc965328c2eaa75b0927ad08767b7e547", 0x28}, {&(0x7f0000000000)="bddb037a78d873f9e39f0d93b318c5ff916043763ab54e7be3eb4446455f7d67acb56d7636689d69a15839d3e62b3adec3f526e383040bd587422cfb3c2457f6fff9f0fd58a8592c19fbfbfb31f3f046d6ea36329506f955dde8adf81f9d6f397268608d3b486c8fd75a2905feee9c8f8826699df2baa206acb01de2c24d1d5fe02e65f74384f53610a91449becf32c4df6be7346229d204306320ac7610e4d0949c4b4dd06d629ce0567705ee5f80c5b2b524a4aa9125c16d20f33cdfc68e88b32be27bc371cefbeb276408", 0xcc}, {&(0x7f0000000000)="a523702897bc1e7c5dde4fee9f069815deb05453d73488dee79e05b4f58552846f9d806cc769cef621c8c37b5c94f91499effe5147df7912d72a8ca92dc561bd2ace3b", 0x43}, {&(0x7f0000714000)="1a2d43fe5127de1b6776aad7f3602f02ca8e6e47ecc73f61510782013eb8f9f0acf75cfb7c9abecf87e49ce49b78438a1c1d41fb2845f8e45ce372cef782dd74c754440434bd0171105ff4f38b3901f43c109792724c13f73c71197cd427f21865eb39574082305552a5df59b0efa1324e5173916c9c43f78bff806d0d06f8d62f3b39f6c2880269723bb0566f3e50330e41fb17bc3f3867733dd9c6a1cef48e50338fcf", 0xa4}, {&(0x7f0000000000)="54ac493efa1305dcb9cecd6df2f6a24d5902f40a3baab943decb79b8714559c7b61ff0316eb01c5b1ce68c564fd474d531801f5295767f47bf1bf63a4a7a7687fbf6d66aeeb8488184a3a6fe0afaff8f90cb0623a0f1deba567e7334a6d8b6b0200e30432397ff03ba1ad40b31367febfbb6d358eb88baf0200223250a7deef1d6cf4d9305c162d390a857c5e1cc4bfd325a4d771549caf2d30289090d1cc4a137e6ec47d0f5d6586761d7b84c82000271a26b2d40877dd82854ddd7d1c97aa3f2de8fb33dc45cb9bd250c3d6cbd0f1848cbc2ddb4fb77b9907e6fce90f43af685ef7dc6b56024ef2b373427b679493f5d72e2eb7538", 0xf6}], 0xa, &(0x7f0000000000)=[@rights={0x28, 0x1, 0x1, [r35, r36, r37, r38, r39]}, @rights={0x20, 0x1, 0x1, [r40, r41, r42, r43]}, @rights={0x10, 0x1, 0x1, []}, @cred={0x20, 0x1, 0x2, r44, r45, r46}], 0x78, 0x80}, {&(0x7f0000001000-0xa)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000000)=[{&(0x7f0000ede000)="e4ed31ab94578f5ba21c5fabb7cf6fd9ee6f73ba8ada7510049c65b3ff9668ea77ad4996cb5c43510b466f41a416331b8226f31c48ac2d715416b9a1a6fc3c45f3b52c663b203f1794fb8ca6b4c675501d6854e700a32a287834306cf128278aa83450fd1bed6a75b5a88861404a51ebe3f258728ef501a0709f029e18feca8d2e48766d3add2beb6b251f434dd4b29b5503e8ccff3065611c02e3b69d3bf11645e9880d92a28e4ff648d6f8d23bcfa8e2e2391e9ce44e4846ef6ebdc0df79c194d6865d959400f033846fe5d27d67e5dcb4af7d82744eb3ca955b73f8befe07", 0xe0}, {&(0x7f0000001000-0xa5)="781b9c2f426e60574887a07ddebba2a0210cbc26be865f019321e4fd5465c12ace45553c2842522ead596a70aff3544c86354ab1209094518f861ffafda0b6dd21da78cb1e7071e4351654e52e80a281531734720e6a954b220424f252748722090f0101fd6d7e8273473a774e03a47c85eb31eb968595b4d08b168803549bb7f679838fda0be8b9742929fc4b9f7e3ea36b429d0a865f330ac5f4ddc1820cb05251bb5d95", 0xa5}, {&(0x7f00009cc000-0xd)="e3d5fa0b54223655e57ce995ee", 0xd}, {&(0x7f0000764000-0x45)="81ae826054558c53370b6c16843174b7cc7482cb479f45e53c0e5281ada98480493b07d869b4f3a4853c31fb68e2de5120c25632aeb37e0b35ffa0e1d3ea609bade70cb454", 0x45}, {&(0x7f000012c000)="9cc8383970cf161de72e685b6cd470c88ced8f12faacac6299346d5a5ddf6bf8ccd34b211cefe6bd3e48fbf6b308c917c6300b25e3f6bdeabb72ff2c6ca7093892abe1f28b3469b61e353659d426e483af8173f035392c2ff6bbbac498c58240a82562b34a8e8a84f5c1949d552121d85e532c27a9f998fb0be18d4e4b423c6523aa7a86fcbddf762c077e1ff58e0a7f215fa1d646e16bdb82f476890d4b2a766625471bd1decab8dec4a6d11736523d471a019802604774624de9e0089049b449912b10752d8151ad88cd89bcbf293493a12d65c5b5e762ed40fd47ce467d59a36d919bddf3d7300978d953f6429d3bfc88972b55bf5ba0811d", 0xfa}, {&(0x7f00007d6000)="d4527d28ed4967ac177115701b847447d0ecb30e21c27d62b9ab3624b13265a7ac9734d0724b184891b1e27b5cc91a9f4b728e6721a77a847bbd2f7c806699da467eac0cbfd5617931396f3d9487e0a0c8379a7d5db64ddae2d2ba6479c8357e2c0a4ffe52acd8da4e3cb2e1784bf7c716628c23b6190cb858c94bfdbce0a84fce31", 0x82}, {&(0x7f0000e8d000)="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", 0xfe}], 0x7, &(0x7f0000aa4000-0xc0)=[@rights={0x38, 0x1, 0x1, [r47, r48, r49, r50, r51, r52, r53, r54, r55]}, @cred={0x20, 0x1, 0x2, r56, r57, r58}, @rights={0x18, 0x1, 0x1, [r59]}, @rights={0x30, 0x1, 0x1, [r60, r61, r62, r63, r64, r65, r66]}, @cred={0x20, 0x1, 0x2, r67, r68, r69}], 0xc0, 0x20044800}, {&(0x7f0000722000)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f000043f000-0x20)=[{&(0x7f0000000000)="41bf94e357bae8478377896b5000da4dba8fd2b75a6c8d5854fe189a7e7de7a676f279d63a5838d8136b8342dd07842c2edccf", 0x33}, {&(0x7f0000001000-0x1000)="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", 0x1000}], 0x2, &(0x7f0000001000-0x40)=[@cred={0x20, 0x1, 0x2, r70, r71, r72}, @cred={0x20, 0x1, 0x2, r73, r74, r75}], 0x40, 0x4000044}, {&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000af5000)=[{&(0x7f0000c36000)="b47ede2d74e1c66afb322cd1b8b06da7cdeef0b8da9d5d05ff181f41beb7b95e4e734fc553d5e139df57e1fad2928843439d8b159e02806706419435d7", 0x3d}, {&(0x7f0000257000)="415ccafcd8781301a9bd72dba44ba8c8991f54b4386ecad888c17104da1c32a645c50247734832c2eafeda9c2720d648bc70d1a5391a8b4b7703a5c1796fdb1110bc3f1f1d96006f5c931b2fcd102bce8f527a2effd221d5b1a18e067e9d39a70053aa1db9740cad27208906e01ed13c4e37a1fcef0b275797dc5aeade0d012207560c5e3c9f6825e3b383ffdb3856a1985cb0f5c9e335f72036fe1ebada62a520bba83652e57c87ea72724cded5d71c7519f59eb7e9eba22ef475e4c915c30197233fa95fb57e3f077c744951cdb029a7650921c583f42f32fc5c52aaa38764a9f843742c343a31a09bdaea7423af", 0xef}], 0x2, 0x0, 0x0, 0x40}, {&(0x7f0000296000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000016000-0x20)=[{&(0x7f0000116000-0x4c)="13d27e207438c3e821171a60d0f1eda342f58ddc560a5244200ca19513e00defcc3659982339c17093fd77fddf52cdd644628d8c1563eb5800fa5534b1fc5036bbe0305ba233a29e337bddf1", 0x4c}, {&(0x7f00001ef000-0x53)="ecaa1707dc5501c4c863fbc2769b5764249170a2dbc1e9b674565491aeeef78d9f17d8239246865e5ef2924676ab95b60e84646e61e58edfaf6250882d21453b36ccbc0ad0fa22b60006be6a56466c40d03827", 0x53}], 0x2, &(0x7f00004ee000-0x18)=[@rights={0x18, 0x1, 0x1, [r76, r77]}], 0x18, 0x20000000}, {&(0x7f00008b4000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001000-0x30)=[{&(0x7f00006ad000)="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", 0x1000}, {&(0x7f0000001000-0xc2)="108ef808b5f89b1bc2f3f4ea1b77713faf2b8550fcc9b29384ba5f1dccc1cc5b408d3cba4b7d5adfb0c1523775abbf484a39338e9b53d937b8c99b7ba08c425be5ab98022fae81011bfe4d4c16dcfa6ff3e989f214e4d44a9e06a03eb9c29b320e8f169f8719249a87e4e175f7b66544069db3dee909460b89af7b81ac426bd18fa251f7bd6e78f82ae55d6a7299edb98564eea05a15eb77442a944e1db4f2cb36ae9b3b7e16ab7e86de787bbe552b6834d25be20e1ce3ebe435ead4839f6244c690", 0xc2}, {&(0x7f0000000000+0x3be)="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", 0x1000}], 0x3, &(0x7f0000000000)=[@rights={0x30, 0x1, 0x1, [r78, r79, r80, r81, r82, r83, r84, r85]}], 0x30, 0x4004}, {&(0x7f0000001000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000604000)=[{&(0x7f000036c000-0xb9)="4ef03b1bb3c6aad8d857c71e557f428d93ddb026145676a4dd900c735c3f731e0c872d9efc1d73ee494f902f47d80f19e0a29f5837b7f9e297acd8af9274aa1f92d75437d29b66d5a53c4c949fe60230eacd5a81ab17d29a322ff37a0de4ccc6c7348fdccbed99b00dc719182f3402786de0d52a2f2e16e90dc7b1cd24c9c33ae7bce861a6859e74fbdd6f877ada750eb147a9f989849db556818d8d27dcfaa877b75e87cf728db6dfb19f44b790dca91c57f523ae045e789f", 0xb9}, {&(0x7f0000c5f000-0x2a)="6dd9661824d82cca4db3d7c62448a8e1dbd6cabaa78b1c49cda665a4e5a9405cda2bd9ac1d0dae2c9040", 0x2a}, {&(0x7f0000001000-0x50)="0488b4c1f7847ac88d906f4cde3af12cdb558abd7c035f97fa893f7048169a2c8ecdd2b890f229e62b375fe507193a196057c0ed9174e45f9d5f6db0b81fba1ed51ac33604d70097cc15f82f92be92cb", 0x50}, {&(0x7f0000545000)="4047a01f3ed0bbf471d21450a56cd62ce23cc5", 0x13}, {&(0x7f0000000000)="27112f6675cf97befc402793650d63f9c0cff2907918464cd0a77822e462e9a0b9511586d5399642cfdf83d3b4be67c4e5bdd25a42ea0ee67ab970fe47ea8acd3370cb552ee9ce1f484a7e5e7dd0176d55a4444d070a0e65ee5abb245deb98ff1b5fefc368e09146342ba368a525e47ca6705ade0b85a399b32ca4b1184d76b4605a", 0x82}], 0x5, &(0x7f00006a7000)=[@cred={0x20, 0x1, 0x2, r86, r87, r88}, @cred={0x20, 0x1, 0x2, r89, r90, r91}, @cred={0x20, 0x1, 0x2, r92, r93, r94}, @cred={0x20, 0x1, 0x2, r95, r96, r97}, @rights={0x30, 0x1, 0x1, [r98, r99, r100, r101, r102, r103, r104, r105]}, @rights={0x30, 0x1, 0x1, [r106, r107, r108, r109, r110, r111, r112, r113]}, @cred={0x20, 0x1, 0x2, r114, r115, r116}, @rights={0x28, 0x1, 0x1, [r117, r118, r119, r120, r121, r122]}, @cred={0x20, 0x1, 0x2, r123, r124, r125}], 0x148, 0x4000000}], 0xa, 0x4800) r126 = msgget$private(0x0, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000d97000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000b8f000)=0xc) getresuid(&(0x7f00003d9000-0x4)=0x0, &(0x7f0000e76000-0x4)=0x0, &(0x7f0000e44000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001000-0x4)=0x0, &(0x7f0000e6b000)=0x0, &(0x7f0000000000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r131 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/checkreqprot\x00', 0x802, 0x0) r132 = getpgrp(0xffffffffffffffff) r133 = getpgrp(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r131, 0x4b2f, 0x9c1) msgctl$IPC_SET(r126, 0x1, &(0x7f0000000000)={{0x80000001, r127, r128, r129, r130, 0x14, 0x7, 0x0, 0x0, 0x0}, 0xa8a8, 0x5, 0x401, 0x5, 0x3, 0x9, r132, r133, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r134 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r131, &(0x7f0000c34000)=0x0, r134, &(0x7f0000aa0000)=0x50, 0x0, 0x1) r135 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r135, 0xc0306201, &(0x7f0000e7c000-0x30)={0x0, 0x0, &(0x7f0000005000-0x44)=[], 0x93, 0x0, &(0x7f0000b00000)=""}) ioctl$BINDER_WRITE_READ(r135, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0x0, 0x4000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) mmap(&(0x7f0000000000/0xe78000)=nil, 0xe78000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000e77000-0x12)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000001000-0x26)=""/38) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f0000096000)=[0x38, 0x38, 0x78, 0x0, 0x38, 0x0]}}], 0xfffffffffffffd90, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = syz_open_dev$binder(&(0x7f00008f5000)='/dev/binder#\x00', 0x0, 0x802) timer_create(0x2, &(0x7f0000298000)={0x0, 0x13, 0x4, @thr={&(0x7f0000728000)="9ead4e7b22a3", &(0x7f0000cf1000-0xa1)="f4958cd4d74038fc462b3584c5178a5eb840f13f828cddb96ba32591388f4ac51191a23eac9f13deca54854fafc87094c7bad6acca275d8b9ea89ec1994b214404e9f839f384b77001dc12223b9f030de073fc2bc21ec8c530ae60dec1d3d0eef1898441096bed0844bee0d0a8fa51702eaceb694c25996eda07a8503898046ffe3416c32b33ece9c1567cf5fb4ea931869931fee8936947b3f0b32be0e0c3cd89"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000e87000-0x4)=0x0) socket$bt_hci(0x1f, 0x3, 0x1) timer_gettime(r2, &(0x7f0000890000)={{0x0, 0x0}, {0x0, 0x0}}) fcntl$getownex(r1, 0x10, &(0x7f00000ff000)={0x0, 0x0}) getpriority(0x0, r3) [ 128.873278] binder: undelivered TRANSACTION_ERROR: 29189 [ 128.927384] binder: 18793:18799 got reply transaction with no transaction stack [ 128.927393] binder: 18793:18799 transaction failed 29201/-71, size 0-0 line 2703 [ 129.188483] binder: undelivered TRANSACTION_ERROR: 29189 [ 129.195113] binder: undelivered TRANSACTION_ERROR: 29189 [ 129.200633] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/25 21:01:55 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xc, 0x1}, 0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000c96000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000290000-0x9)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000d5b000)={0x7ff, {{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00001f1000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x850, 0x0, 0x5, 0x3000, 0x4004, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0}) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000879000-0x4c)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0xffffffffffffff94, 0x0, &(0x7f0000229000)=[], &(0x7f0000417000)=[0x38, 0x40, 0x78, 0x0, 0x0, 0x40, 0x16, 0x38]}, 0x5}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:55 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000119000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000eb4000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000418000)={r2, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000061000)={@generic="7c5e399876a69672a39d433215e48bf6", @ifru_addrs={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000a44000)={0x2, r0, 0x0}) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000f3e000)=0x9, 0x4) r4 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000227000-0x110)={{0xffffffffffffffc0, 0x1, 0xee, 0x3, "abd745b99a3bffa10e160de9816061ea23637488e228040213d6f7d9bdf9aea5b4996ec624251a3accaddad7", 0x3f}, 0x0, 0x0, 0x7fffffff, r4, 0x1, 0x6, "ffd506188cb3372b313a9beb38fb4f6ec03a384f6e670220e4d17dcaf34fb2230936008b8011e4a74c0450b2ec5cb74ef7672073aa5ab104d69ff283ab4066cd", &(0x7f0000849000)='\x00', 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x1, 0x80000001, 0xffff, 0xf4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00001dd000-0x14)={0x0, 0xfffffffffffffff7, 0x1f, 0x3, 0x0, 0xf6c2}, &(0x7f0000d31000-0x4)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000432000)={0x0, @in6={{0xa, 0x2, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401, 0x8, 0x101, 0x80000001, 0x1}, &(0x7f00003ce000)=0xa0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000d65000)={0x0, 0x5}, &(0x7f0000e6c000)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000496000-0x18)={r5, 0x0, 0x0, 0xfffffffffffffff7, 0xa56}, &(0x7f0000671000-0x4)=0xfffffffe) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f0000916000-0xb)='/dev/audio\x00', 0x407ffe, 0x0) r6 = syz_open_dev$adsp(&(0x7f000075b000)='/dev/adsp#\x00', 0x3ff, 0x2) fstat(r0, &(0x7f0000d1d000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f00002d8000)={0x1, 0x2, r4, 0x6, r7, 0xfff, 0x5, 0x9}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000391000-0x8)={0x0, 0x0}, 0x84800) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000b05000-0x8)={0xfffffffffffff2bc, 0xffffffff}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f000030f000-0x4)=0x0) fcntl$setownex(r1, 0xf, &(0x7f000019f000-0x1)={0x3, r2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 129.216933] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.227267] binder: 18805:18808 ioctl 800442d2 205c8ff0 returned -22 2018/01/25 21:01:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setsig(r0, 0xa, 0x2a) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:55 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000cfa000)='/dev/dmmidi#\x00', 0x6, 0x8000) connect$rds(r1, &(0x7f00000cf000-0x10)={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000ec9000)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) recvmmsg(r0, &(0x7f0000fef000)=[{{&(0x7f000042f000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, 0x14, &(0x7f0000b69000-0x20)=[{&(0x7f00009c2000)=""/89, 0x59}, {&(0x7f000076b000)=""/4096, 0x1000}], 0x2, &(0x7f0000059000)=""/4096, 0x1000, 0x40}, 0xd6}], 0x1, 0x2100, &(0x7f00001d5000)={0x0, 0x0}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000331000-0x10)={0x525, 0x40, 0xfff, 0x0}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f06000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 129.233066] binder: 18805:18808 BC_ACQUIRE_DONE node 1027 has no pending acquire request 2018/01/25 21:01:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000be5000)='/dev/autofs\x00', 0x2000000000040100, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000945000)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000017d000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) accept4$vsock_stream(r0, &(0x7f00009fc000-0x10)={0x28, 0x0, 0x2711, @any=0xffffffff, 0x0}, 0x10, 0x80800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000291000-0x10)={0x2, 0xfffffffffffff001, 0x8, 0x0}, 0x10) 2018/01/25 21:01:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000867000-0x8)='./file0\x00', 0x181000, 0x20) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f000047c000-0x1e)={0x3, 0x18000000000000, 0xcb5, "9b04156373cf", "c3d8fd91e48b7d624206a3c217c2756c"}) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000879000-0x490)={0x7, {{0xa, 0x1, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xf584}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x8, [{{0xa, 0x0, 0xbc, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x3, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0x13}}, 0x100000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0xd43, @loopback={0x0, 0x1}, 0x100000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x3, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x5, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffff00000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x8e, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x490) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) faccessat(r0, &(0x7f0000e1a000)='./file0\x00', 0x100, 0x1300) [ 129.233092] binder: 18805:18808 got reply transaction with bad transaction stack, transaction 1028 has target 18805:0 [ 129.233104] binder: 18805:18808 transaction failed 29201/-71, size 0-0 line 2718 [ 129.233200] binder: 18807:18810 ERROR: BC_REGISTER_LOOPER called without request [ 129.235854] audit: type=1326 audit(1516914115.280:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.238603] binder: 18806:18816 got transaction with invalid offset (0, min 0 max 0) or object. [ 129.238641] binder: 18806:18816 transaction failed 29201/-22, size 0-8 line 2966 [ 129.241631] audit: type=1326 audit(1516914115.287:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=230 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.241745] audit: type=1326 audit(1516914115.288:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.241804] binder_alloc: 18807: binder_alloc_buf, no vma [ 129.241825] binder: 18807:18810 transaction failed 29189/-3, size 24-0 line 2903 [ 129.241956] audit: type=1326 audit(1516914115.288:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.245813] audit: type=1326 audit(1516914115.290:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=186 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.245833] audit: type=1326 audit(1516914115.291:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.245850] audit: type=1326 audit(1516914115.291:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.248071] audit: type=1326 audit(1516914115.292:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=222 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.248088] audit: type=1326 audit(1516914115.293:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18803 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452f19 code=0x7ffc0000 [ 129.259099] binder: BINDER_SET_CONTEXT_MGR already set [ 129.259108] binder: 18805:18819 ioctl 40046207 0 returned -16 [ 129.260841] binder: 18805:18808 ioctl 800442d2 205c8ff0 returned -22 [ 129.261247] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.261268] binder: 18804:18815 transaction failed 29189/-3, size 0-0 line 2903 [ 129.268317] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.268341] binder: 18805:18824 transaction failed 29189/-3, size 40-0 line 2903 [ 129.272957] binder_alloc: binder_alloc_mmap_handler: 18807 20000000-20002000 already mapped failed -16 [ 129.297258] binder: BINDER_SET_CONTEXT_MGR already set [ 129.297268] binder: 18807:18820 ioctl 40046207 0 returned -16 [ 129.298479] binder: 18807:18810 ERROR: BC_REGISTER_LOOPER called without request [ 129.328190] binder: BINDER_SET_CONTEXT_MGR already set [ 129.328200] binder: 18831:18833 ioctl 40046207 0 returned -16 [ 129.328983] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.329042] binder: 18831:18833 transaction failed 29189/-3, size 40-0 line 2903 [ 129.337076] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.337105] binder: 18803:18811 transaction failed 29189/-3, size 0-8 line 2903 [ 129.338376] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.338484] binder: 18826:18828 transaction failed 29189/-3, size 0-8 line 2903 [ 129.351738] binder: 18835:18837 got reply transaction with no transaction stack [ 129.351747] binder: 18835:18837 transaction failed 29201/-71, size 0-0 line 2703 [ 129.352053] binder: 18827:18836 got reply transaction with no transaction stack [ 129.352061] binder: 18827:18836 transaction failed 29201/-71, size -108-0 line 2703 [ 129.361829] binder_alloc: binder_alloc_mmap_handler: 18831 20000000-20002000 already mapped failed -16 [ 129.364411] binder: BINDER_SET_CONTEXT_MGR already set [ 129.364423] binder: 18831:18833 ioctl 40046207 0 returned -16 [ 129.364514] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.364546] binder: 18831:18841 transaction failed 29189/-3, size 40-0 line 2903 [ 129.365229] binder: BINDER_SET_CONTEXT_MGR already set [ 129.365236] binder: 18838:18840 ioctl 40046207 0 returned -16 [ 129.365308] binder: 18838:18840 ERROR: BC_REGISTER_LOOPER called without request [ 129.373391] binder_alloc: 18807: binder_alloc_buf, no vma [ 129.373416] binder: 18838:18840 transaction failed 29189/-3, size 24-0 line 2903 [ 129.380799] binder_alloc: binder_alloc_mmap_handler: 18838 20000000-20002000 already mapped failed -16 [ 129.384961] binder: BINDER_SET_CONTEXT_MGR already set [ 129.384970] binder: 18838:18840 ioctl 40046207 0 returned -16 [ 129.385038] binder: 18838:18840 ERROR: BC_REGISTER_LOOPER called without request [ 129.385929] binder_alloc: 18807: binder_alloc_buf, no vma [ 129.385953] binder: 18838:18840 transaction failed 29189/-3, size 24-0 line 2903 [ 129.404823] binder: 18843:18846 transaction failed 29189/-22, size 0-8 line 2788 [ 129.412334] binder: 18827:18848 got reply transaction with no transaction stack [ 129.412344] binder: 18827:18848 transaction failed 29201/-71, size -108-0 line 2703 [ 129.418259] binder: 18813:18818 BC_ACQUIRE_DONE u0000000000000000 no match [ 129.418271] binder: 18813:18818 got reply transaction with no transaction stack [ 129.418279] binder: 18813:18818 transaction failed 29201/-71, size 0-0 line 2703 [ 129.421752] binder: BINDER_SET_CONTEXT_MGR already set [ 129.421763] binder: 18847:18850 ioctl 40046207 0 returned -16 [ 129.423436] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.423469] binder: 18847:18850 transaction failed 29189/-3, size 40-0 line 2903 [ 129.431372] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.431408] binder: 18849:18851 transaction failed 29189/-3, size 0-8 line 2903 [ 129.439735] binder: BINDER_SET_CONTEXT_MGR already set [ 129.439745] binder: 18847:18850 ioctl 40046207 0 returned -16 [ 129.441063] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.441085] binder: 18847:18853 transaction failed 29189/-3, size 40-0 line 2903 [ 129.443404] binder: 18847:18850 BC_ACQUIRE_DONE u0000000000000000 no match [ 129.443414] binder: 18847:18850 got reply transaction with no transaction stack [ 129.443422] binder: 18847:18850 transaction failed 29201/-71, size 0-0 line 2703 [ 129.444311] binder_alloc: 18805: binder_alloc_buf, no vma [ 129.444327] binder: 18849:18855 transaction failed 29189/-3, size 0-8 line 2903 [ 130.101850] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.101868] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.101960] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.102070] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.102127] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.102207] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.102346] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.102371] binder: release 18804:18815 transaction 1033 out, still active [ 130.102376] binder: undelivered TRANSACTION_COMPLETE [ 130.102433] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.161614] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.167107] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.181890] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.187397] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.192890] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0x100000000, 0x0}, &(0x7f0000cd4000)=0x18) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000c85000)={0x0, @rand_addr=0x0, @loopback=0x0}, &(0x7f00007ad000)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000ada000)={@empty=0x0, @broadcast=0xffffffff, r1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00004d1000)=[@in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x6, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb}, 0x5}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x688, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}], 0x68) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000226000)=0x5, 0x4) 2018/01/25 21:01:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00001b3000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) r2 = syz_open_dev$vcsa(&(0x7f0000c90000)='/dev/vcsa#\x00', 0x2, 0x200200) ioctl$TIOCCBRK(r2, 0x5428) 2018/01/25 21:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000fd000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000d2a000-0xe)='/dev/admmidi#\x00', 0x40, 0x511000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000a72000-0x68)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) unshare(0x4400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000083000)={0x0, 0x0}) getsockname(r0, &(0x7f00005a4000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000804000-0x4)=0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000898000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f000009a000-0x4)=0x0) sched_setaffinity(r3, 0x8, &(0x7f00007b4000-0x8)=0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0xfffffffffffffe75, 0x0, &(0x7f0000ee1000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x3) r1 = syz_open_dev$vcsn(&(0x7f0000bf6000-0xa)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x0) r2 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f93000)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000435000)='/dev/cuse\x00', 0x8000, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00002f1000-0x10)=@req={0x2, 0x6, 0x80000001, 0x8000}, 0x10) ioctl$KVM_SMI(r0, 0xaeb7) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000d1e000)={0x0, 0x0, &(0x7f00003eb000)=[], 0x20, 0x0, &(0x7f0000240000-0x20)="51e655ad1066cfa898d8fc7e1ca4cb1b2d47af19e73bef781b9f4de5ee71bdf2"}) 2018/01/25 21:01:56 executing program 5: r0 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x1d6d293c, 0x9, &(0x7f0000e8b000-0x3f)=""/63, &(0x7f0000000000)=0x3f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000e23000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000ea1000-0x4)=0x7fff, 0x4) syz_open_dev$binder(&(0x7f00009be000)='/dev/binder#\x00', 0x0, 0x802) [ 130.198420] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.203985] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.209486] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.214995] binder: release 18805:18808 transaction 1028 out, still active [ 130.222043] binder: undelivered TRANSACTION_COMPLETE [ 130.227170] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.232631] binder: send failed reply for transaction 1028, target dead [ 130.239407] binder: send failed reply for transaction 1033, target dead [ 130.246230] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/25 21:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000fd1000-0xd)='/dev/binder#\x00', 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f000018c000-0x38)={0x4, 0x0, &(0x7f0000e1b000-0xcb)="34e1da60dbd894f153cd4e4fdb7f5e9621c187e824425f0725b4a118811bba011d2761cb3dd9ce7835f8bdc15150572612bf866e8ca6fa4aad2ab97615bc4c8a58cd78f889dbb37aff12523883bf52bd075108924e909998725bc73774a1e840e8dc9d9c3fd0a3d66f783fe3871da68bf0c8677a524c463ea427cf5f0fe6dd6d9b49fed3f5b2aff422ecc80e3f3482c2a46ad6717bf4b0090bafcca03a5504169f3e2be33ea0b6b5077a3387175d876d9e3599dfd1a9e3e147a2904784a99a925eacea3a638dd5cba5d823", &(0x7f000082f000)="ee9e66eb72983f0774a90a31da594e3d9f807ce17de7e5825d124983de1b9b889270afc188b0a0003f41c9814450a6bca963d1", 0xcb, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000853000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000038c000-0x30)={0x44, 0x0, &(0x7f000038a000)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000115000)=[@fd={0x66642a85, 0x0, r1, 0x0, 0xffffffffffffffff}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f0000f6d000)=[0x48, 0x0, 0x20]}, 0x2825}}], 0x0, 0x0, &(0x7f0000f90000)=""}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000608000)={&(0x7f0000fee000)='./file0\x00', 0x0, 0x18}, 0x10) socketpair(0x8, 0x4, 0x7f, &(0x7f0000dec000-0x8)={0x0, 0x0}) r4 = socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00006b0000-0x8)={r4, r2}) 2018/01/25 21:01:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) r1 = syz_open_dev$midi(&(0x7f0000e8d000)='/dev/midi#\x00', 0xae7, 0x481) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000969000-0x18)={0x2, [0x8001, 0xf8]}) 2018/01/25 21:01:56 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000de8000-0x98)={r1, @in6={{0xa, 0x1, 0xf7, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x5}, &(0x7f00007db000)=0x98) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000021000)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7593, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 130.299420] binder: 18862:18868 got transaction with invalid offset (0, min 0 max 0) or object. [ 130.305087] binder: 18860:18873 ERROR: BC_REGISTER_LOOPER called without request 2018/01/25 21:01:56 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000053000-0xc)={0x4, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00008dc000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000e75000)=""/157) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000192000)={0x3, 0x5, 0x8, 0xa0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000f01000)=0x0) r4 = semget$private(0x0, 0x5, 0x4) semctl$SEM_INFO(r4, 0x2, 0x13, &(0x7f0000883000-0xf4)=""/244) 2018/01/25 21:01:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000f18000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000dd3000-0x90)={[0xffffffffffff8001, 0x1, 0x0, 0x0, 0x8001, 0x9, 0x3a, 0x85b, 0x7f, 0x3, 0x400, 0xfff, 0x3, 0x4, 0x2, 0x2], 0x0, 0x40}) r2 = dup(r0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) getsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f00000b6000-0x4)=0x0, &(0x7f0000fda000-0x4)=0x4) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00008ae000)={0x5, 0xe8, "6296abf91d158d6201dbd6bb5f9f48264eff4751a5a4e83a47aa94af7eeddb17960a65cd66fd59f96ae0b3c2a905be1fb5af03ee9d9d71c5021f5052e8263f38d7b0c147c32ed2a2ef4796b4792f7915307984a6d28828dacf701375f6f8c0fb51704fa14b215d6317d41da705f5c6ae9218c79be9713a7fd349ef0d1bff255117e9d935c77c93580f981b15a5f063c92c9030285e9d05c42a45f528a537755231dc56cdf079a4d07993d815932a6d0edd02906115ce9294a073826d6de00f7ca60773a148b2da6e57744deb3a8f6f6582df31c7c90b975a34be1f89cdf92a40f318bfd2ba770e25"}) timerfd_settime(r1, 0x1, &(0x7f0000169000-0x20)={{0x77359400, 0x0}, {0x0, 0x0}}, &(0x7f0000bee000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000db000)=0xfffffffffffffffd, 0x4) 2018/01/25 21:01:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000926000)='/dev/sg#\x00', 0x6d8, 0x400000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000cba000-0x18)={0x0, 0x6, 0x8, [0xa51f, 0x124, 0x8000, 0x9, 0x1, 0x2, 0xae4f, 0x9]}, &(0x7f0000cef000-0x4)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00006ab000+0x65e)={r2, 0x9, 0xf7, "65f809cf694daf43db0bd7127aa10f7b10aa3a7ea888e194635a17ff03e738f6ac05834742c5be7d6e01056c9084c537770819d07f1cc758d1912a7ce3ad225f8135fac19de7aec1c2c96f9f7f349f18dff1fa5dea22cc1ee67ad81a55c43ed8799cf6cb9f933b6acf0dbdbde3d1ffd846ba64fc130ab18c40ba1fe8fc090e2c98ba78cfdbfdc07669a797229c81e86e5357f2fae5f703c3546078e6d883532380a1e82fdb1ef860094fe80289b2b545497473f11a1a1cebf48ee654776012ff03fc7375596d1ed1ef2d293b7dbd3f7c43df7921aec2c3e62c2138f39fe9561984f2c19b78466695a6b03c4dc1c7050b2b795e6fda55ce"}, 0xff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) [ 130.307265] binder: 18860:18873 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/01/25 21:01:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00009ca000)=0x0, &(0x7f0000bdc000-0x4)=0x4) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000031d000)={{{@in=@empty=0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000602000)=0xe8) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000be7000)={0x3, r0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f000038c000)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100200001, 0x200, 0x3fb, 0x400, 0x7, 0x2000000, r1}) r3 = syz_open_dev$amidi(&(0x7f000090d000-0xc)='/dev/amidi#\x00', 0x2, 0x240) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) [ 130.311042] binder: 18861:18872 got reply transaction with no transaction stack [ 130.311055] binder: 18861:18872 transaction failed 29201/-71, size 0-0 line 2703 [ 130.311860] binder: 18864:18869 BC_ACQUIRE_DONE u0000000000000000 no match [ 130.311874] binder: 18864:18869 got reply transaction with no transaction stack [ 130.311887] binder: 18864:18869 transaction failed 29201/-71, size 0-0 line 2703 [ 130.312633] binder: 18863:18870 BC_ACQUIRE_DONE node 1052 has no pending acquire request [ 130.312652] binder: 18863:18870 got reply transaction with bad transaction stack, transaction 1054 has target 18863:0 [ 130.312661] binder: 18863:18870 transaction failed 29201/-71, size 0-0 line 2718 [ 130.325595] binder: 18861:18881 got reply transaction with no transaction stack [ 130.325605] binder: 18861:18881 transaction failed 29201/-71, size 0-0 line 2703 [ 130.325835] binder_alloc: binder_alloc_mmap_handler: 18860 20000000-20002000 already mapped failed -16 [ 130.326504] binder: 18862:18880 BC_ACQUIRE_DONE u0000000000000000 no match [ 130.326514] binder: 18862:18880 got reply transaction with no transaction stack [ 130.326522] binder: 18862:18880 transaction failed 29201/-71, size 0-0 line 2703 [ 130.339245] binder: BINDER_SET_CONTEXT_MGR already set [ 130.339253] binder: 18863:18879 ioctl 40046207 0 returned -16 [ 130.341545] binder_alloc: 18863: binder_alloc_buf, no vma [ 130.341585] binder: 18863:18870 transaction failed 29189/-3, size 40-0 line 2903 [ 130.341880] binder: BINDER_SET_CONTEXT_MGR already set [ 130.341889] binder: 18860:18877 ioctl 40046207 0 returned -16 [ 130.350242] binder: 18860:18884 ERROR: BC_REGISTER_LOOPER called without request [ 130.351964] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.352211] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.354517] binder_alloc: 18860: binder_alloc_buf, no vma [ 130.354541] binder: 18860:18873 transaction failed 29189/-3, size 24-0 line 2903 [ 130.373740] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.373914] binder: release 18863:18870 transaction 1054 out, still active [ 130.373919] binder: undelivered TRANSACTION_COMPLETE [ 130.373926] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.373948] binder: send failed reply for transaction 1053 to 18865:18867 [ 130.373962] binder: send failed reply for transaction 1054, target dead [ 130.382984] binder: 18887:18888 got reply transaction with no transaction stack [ 130.382994] binder: 18887:18888 transaction failed 29201/-71, size 0-0 line 2703 [ 130.387629] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.387856] binder: undelivered transaction 1057, process died. [ 130.395839] binder: 18890:18895 transaction failed 29189/-22, size 0-8 line 2788 [ 130.402619] binder: undelivered TRANSACTION_COMPLETE [ 130.402632] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.410962] binder: 18894:18897 BC_ACQUIRE_DONE node 1067 has no pending acquire request [ 130.410977] binder: 18894:18897 got reply transaction with bad transaction stack, transaction 1068 has target 18894:0 [ 130.410987] binder: 18894:18897 transaction failed 29201/-71, size 0-0 line 2718 [ 130.419454] binder: 18887:18888 got reply transaction with no transaction stack [ 130.419463] binder: 18887:18888 transaction failed 29201/-71, size 0-0 line 2703 [ 130.430092] binder_alloc: 18894: binder_alloc_buf, no vma [ 130.430124] binder: 18890:18895 transaction failed 29189/-3, size 0-8 line 2903 [ 130.436323] binder_alloc: binder_alloc_mmap_handler: 18894 20000000-20002000 already mapped failed -16 [ 130.439233] binder: BINDER_SET_CONTEXT_MGR already set [ 130.439242] binder: 18894:18897 ioctl 40046207 0 returned -16 [ 130.439245] binder_alloc: 18894: binder_alloc_buf, no vma [ 130.439267] binder: 18894:18904 transaction failed 29189/-3, size 40-0 line 2903 [ 130.444274] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.444405] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.453291] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.453503] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.457165] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.457274] binder: release 18894:18897 transaction 1068 out, still active [ 130.457278] binder: undelivered TRANSACTION_COMPLETE [ 130.457286] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.457303] binder: send failed reply for transaction 1068, target dead [ 130.465292] binder: 18901:18902 transaction failed 29189/-22, size 0-0 line 2788 [ 130.469141] binder: 18898:18903 ERROR: BC_REGISTER_LOOPER called without request [ 130.470214] binder: 18898:18903 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 130.471154] binder: 18901:18902 transaction failed 29189/-22, size 0-0 line 2788 [ 130.474096] binder: 18900:18909 transaction failed 29189/-22, size 0-8 line 2788 [ 130.483216] binder: 18910:18911 got reply transaction with no transaction stack [ 130.483225] binder: 18910:18911 transaction failed 29201/-71, size 0-0 line 2703 [ 130.483549] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.483868] binder_alloc: binder_alloc_mmap_handler: 18898 20000000-20002000 already mapped failed -16 [ 130.491737] binder: 18910:18911 got reply transaction with no transaction stack [ 130.491745] binder: 18910:18911 transaction failed 29201/-71, size 0-0 line 2703 [ 130.501272] binder: BINDER_SET_CONTEXT_MGR already set [ 130.501282] binder: 18898:18903 ioctl 40046207 0 returned -16 [ 130.503850] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.504092] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.520299] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.520779] binder: 18898:18903 ERROR: BC_REGISTER_LOOPER called without request [ 130.523085] binder: 18900:18915 transaction failed 29189/-22, size 0-8 line 2788 [ 130.523228] binder_alloc: 18898: binder_alloc_buf, no vma [ 130.523251] binder: 18898:18912 transaction failed 29189/-3, size 24-0 line 2903 [ 130.526422] binder: 18900:18909 BC_ACQUIRE_DONE u0000000000000000 no match [ 130.526433] binder: 18900:18909 got reply transaction with no transaction stack [ 130.526441] binder: 18900:18909 transaction failed 29201/-71, size 0-0 line 2703 [ 130.542144] binder: undelivered transaction 1075, process died. 2018/01/25 21:01:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000c96000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) keyctl$join(0x1, &(0x7f0000384000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000461000-0x4)=0x5, 0x4) ioctl(r2, 0x7, &(0x7f00007ae000-0x74)="f29380aa2fb3aa834b15048264bed7a93393bdcc47084d102c4bb6315d138cb7bd6b9bde784c76d3fc3b55d70acbda1e9ca012c1a521a66fb77b8b65ed31db3a472ec4e56f4e1c050d9594b276ca5932d8bddde7c87ba3bb75156059d8544305ded529e656ca65a9e3eb8c1d670e6059057273ae") open$dir(&(0x7f0000bde000)='./file0\x00', 0x400, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) 2018/01/25 21:01:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000f26000-0x8)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000a28000)={{0x0, 0x1}, 'port0\x00', 0x8d, 0x140000, 0x3, 0xa0, 0x80000000, 0x7, 0x3, 0x0, 0x2, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00008ec000-0x1000)=""/4096) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00003e6000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000f7f000-0x68)={0x2, 0xffff, 0x100000000, {0x77359400, 0x0}, 0x9, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) r1 = semget(0x0, 0x2, 0x644) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000fc7000-0x19)=""/25) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000934000)={0x6, [0x2, 0x8, 0x40, 0x4, 0x5, 0x8]}, &(0x7f000026a000)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) semctl$SETVAL(r1, 0x7, 0x10, &(0x7f00007eb000-0x4)=0x7d) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:57 executing program 6: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000f5c000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000cdc000)=0x8, &(0x7f0000223000-0x4)=0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f000005d000-0x4)=0x1d, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000c7d000)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000db4000-0x4)=0x3, 0x4) r2 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) connect$vsock_stream(r0, &(0x7f0000303000-0x10)={0x28, 0x0, 0x2710, @reserved=0x1, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b88000-0x10)={0x4, &(0x7f0000aa8000-0x20)=[{0x10000, 0x8, 0x8, 0x4}, {0xaa7, 0x401, 0x5, 0x0}, {0x10001, 0x400, 0x5, 0x0}, {0x7, 0x7, 0x1, 0x2}]}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000559000)='/dev/rtc\x00', 0x241, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000885000-0x20)=[{0x8, 0x5}, {0x3, 0x7}, {0x4, 0x6}, {0xa, 0x8000}], 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:57 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = accept4$inet6(r0, &(0x7f0000339000)={0x0, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f000077d000)=0x1c, 0x80000) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f000073c000-0x4)=0x0) r2 = epoll_create(0x4000000010011) r3 = syz_open_dev$audion(&(0x7f0000f71000-0xc)='/dev/audio#\x00', 0x2, 0x102) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00009fe000)={0x400000000000000, 0x1, 0xb9, 0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000c8a000-0xe8)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a08000)=0xe8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000337000-0xc)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009f0000-0x30)={0x50, 0x0, &(0x7f0000971000-0xf8)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x0, &(0x7f0000cc0000-0x18)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x0}], &(0x7f0000f46000-0x20)=[]}}, @dead_binder_done={0x40086310, 0x0}], 0xca, 0x0, &(0x7f0000901000-0xca)="5eda03d8e5df329f39d4c8aab4f9773c3b4986ae78c80921549d5c4ba42b52f5e02d883bc787f2290089227599501e80e31105ef04b419f6e0d8240c3e2130186770f475a07419f64fc95365c06ded8770a02bdefb58cec941efed6d69d3680ec2ec4a8cb56fdda761442b870262760ef014253194e4c95b364bd6873173290aee011160b294c687c25e6ba86c1e0ecd9bd024ccf0ceca72eee254c3b6c1b38bc9bca0b5ffef4e992d5faf5f91a22bfa67c81857dd36981971baf302bf24b6c1aa770894e43d4b809705"}) 2018/01/25 21:01:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x3) r1 = syz_open_dev$vcsn(&(0x7f0000bf6000-0xa)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x0) r2 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000f93000)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) 2018/01/25 21:01:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) r1 = syz_open_dev$usbmon(&(0x7f0000a38000)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000ff000-0x50)={{0x2, 0xf9b}, {0x8, 0x8}, 0x4, 0x4, 0xffff, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 131.023591] binder: 18862:18868 transaction failed 29201/-22, size 0-8 line 2966 [ 131.030907] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.031170] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.031181] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.052440] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.057930] binder: undelivered TRANSACTION_ERROR: 29201 2018/01/25 21:01:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x44, 0x0, &(0x7f0000d89000)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) socket$llc(0x1a, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000371000-0xc)='/dev/autofs\x00', 0x140, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000f6f000-0xb0)={{0x9, 0xffffffff}, 'port0\x00', 0x8, 0x12, 0xffffffffffffff71, 0x1, 0x6, 0x7f, 0xd73, 0x0, 0x2, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/25 21:01:57 executing program 7 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f000095f000)=[{r0, 0x0, 0x0}], 0x1, 0x0) 2018/01/25 21:01:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x554c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cb5000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr(&(0x7f00009b8000-0x8)='./file0\x00', &(0x7f0000717000-0x16)=@random={'security.', '/dev/binder#\x00'}, &(0x7f000090a000-0xc)='^uservmnet0\x00', 0xc, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b000-0x58)=[], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) 2018/01/25 21:01:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000972000-0x62)={0x62, 0xfffffffffffffffe, "feb93ceb254471f7cbd9e91c1ead6f997e02e1e7662eb558d9b31db4f809101ab71cee4bfacd4cacce88deb33f86accec8359761bf4885b86818cca9a5409b92840c0ee8a0fc41d4ec4b32cacdf43574715f2a004fe15c8398db"}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000)=[], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) timer_create(0x7, &(0x7f0000642000-0x60)={0x0, 0x36, 0x1, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f56000)=0x0) clock_gettime(0x0, &(0x7f00007f8000-0x10)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000f8e000-0x20)={{0x77359400, 0x0}, {r3, r4+30000000}}, &(0x7f0000aa6000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00009e3000-0x10)='/selinux/status\x00', 0x0, 0x0) epoll_pwait(r5, &(0x7f00001f6000-0xc)=[{0x0, 0x0}], 0x1, 0x1, &(0x7f0000b1e000-0x8)={0x7fffffff}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000acd000)='/dev/qat_adf_ctl\x00', 0x30041, 0x0) faccessat(r6, &(0x7f0000502000)='./file0\x00', 0x4c, 0x500) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f000041a000-0x6)={0x0, 0xe8e1}, &(0x7f00008bb000)=0x6) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00004f2000-0x14)={r7, 0x8001, 0xabe, 0x6, 0x2, 0x4}, &(0x7f0000878000)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000cff000-0x8c)={r7, @in6={{0xa, 0x0, 0x58ca, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000613000)=0x8c) [ 131.093829] binder: 18917:18925 transaction failed 29189/-22, size 0-8 line 2788 [ 131.101413] binder: 18928:18929 transaction failed 29189/-22, size 0-8 line 2788 2018/01/25 21:01:57 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() syz_open_dev$sndpcmc(&(0x7f0000483000)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000e4c000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0}, &(0x7f0000cd4000)=0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b55000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000f9a000)={0x0, 0x0}) 2018/01/25 21:01:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000237000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f00008c7000)=@un=@file={0x0, ""/108}, &(0x7f00002c2000)=0x6e, 0x80800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f000019e000-0x28)={@generic="ac5d0eed168b8fd89d9f2328be9b9371", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000077d000-0xe8)={{{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c11000-0x4)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000070000)={{{@in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3, 0x8, 0x3, 0x0, 0xa, 0x80, 0xa0, 0x2c, r2, r3}, {0x3, 0x2, 0x8, 0x89d, 0x7, 0x2, 0x15a, 0x7fff}, {0x6, 0x5, 0x3, 0x10000}, 0x1130ccf7, 0x3, 0x1, 0x1, 0x3, 0x2}, {{@in=@multicast1=0xe0000001, 0x2, 0xff}, 0xa, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x5, 0x4, 0x1, 0xfffffffffffffff7, 0x5, 0x800, 0x10001}}, 0xe8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000510000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x58, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, 0x0, 0x0}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009e3000-0x18)=[], &(0x7f000009b000-0x20)=[]}}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 131.105560] binder: 18920:18932 BC_ACQUIRE_DONE node 1085 has no pending acquire request [ 131.105576] binder: 18920:18932 got reply transaction with bad transaction stack, transaction 1086 has target 18920:0 [ 131.105587] binder: 18920:18932 transaction failed 29201/-71, size 0-0 line 2718 [ 131.121998] binder: 18927:18933 ERROR: BC_REGISTER_LOOPER called without request [ 131.123010] binder: 18927:18933 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 131.123375] binder: 18918:18931 got transaction with invalid offset (0, min 0 max 0) or object. [ 131.123416] binder: 18918:18931 transaction failed 29201/-22, size 0-8 line 2966 [ 131.142856] binder_alloc: binder_alloc_mmap_handler: 18920 20000000-20002000 already mapped failed -16 [ 131.143292] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.145366] binder: BINDER_SET_CONTEXT_MGR already set [ 131.145376] binder: 18920:18940 ioctl 40046207 0 returned -16 [ 131.148416] binder: release 18923:18926 transaction 1088 out, still active [ 131.148422] binder: undelivered TRANSACTION_COMPLETE [ 131.148881] binder_alloc: 18920: binder_alloc_buf, no vma [ 131.148905] binder: 18920:18932 transaction failed 29189/-3, size 40-0 line 2903 [ 131.149475] binder_alloc: 18920: binder_alloc_buf, no vma [ 131.149507] binder: 18918:18931 transaction failed 29189/-3, size 0-8 line 2903 [ 131.150228] binder: 18920:18940 BC_ACQUIRE_DONE u0000000000000000 no match [ 131.150237] binder: 18920:18940 got reply transaction with no transaction stack [ 131.150245] binder: 18920:18940 transaction failed 29201/-71, size 0-0 line 2703 [ 131.154856] binder_alloc: binder_alloc_mmap_handler: 18927 20000000-20002000 already mapped failed -16 [ 131.166047] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.166275] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.167310] binder: BINDER_SET_CONTEXT_MGR already set [ 131.167319] binder: 18927:18942 ioctl 40046207 0 returned -16 [ 131.167361] binder: 18936:18937 got reply transaction with no transaction stack [ 131.167369] binder: 18936:18937 transaction failed 29201/-71, size 0-0 line 2703 [ 131.169585] binder: 18927:18933 ERROR: BC_REGISTER_LOOPER called without request [ 131.169639] binder_alloc: 18927: binder_alloc_buf, no vma [ 131.169663] binder: 18927:18942 transaction failed 29189/-3, size 24-0 line 2903 [ 131.176207] binder_alloc: 18920: binder_alloc_buf, no vma [ 131.176232] binder: 18943:18946 transaction failed 29189/-3, size 0-0 line 2903 [ 131.177879] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.177891] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.178091] binder: release 18920:18932 transaction 1086 out, still active [ 131.178097] binder: undelivered TRANSACTION_COMPLETE [ 131.178104] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.178123] binder: send failed reply for transaction 1086, target dead [ 131.178131] binder: send failed reply for transaction 1088, target dead [ 131.180671] binder: 18917:18935 transaction failed 29189/-22, size 0-8 line 2788 [ 131.191397] FAULT_INJECTION: forcing a failure. [ 131.191397] name failslab, interval 1, probability 0, space 0, times 0 [ 131.191408] CPU: 0 PID: 18947 Comm: syz-executor7 Not tainted 4.15.0-rc9+ #280 [ 131.191417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.191422] Call Trace: [ 131.191439] dump_stack+0x194/0x257 [ 131.191463] ? arch_local_irq_restore+0x53/0x53 [ 131.191515] should_fail+0x8c0/0xa40 [ 131.191548] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 131.191572] ? check_noncircular+0x20/0x20 [ 131.191625] ? find_held_lock+0x35/0x1d0 [ 131.191711] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 131.191719] ? lock_downgrade+0x980/0x980 [ 131.191739] ? rcu_note_context_switch+0x710/0x710 [ 131.191749] ? lock_release+0xa40/0xa40 [ 131.191784] should_failslab+0xec/0x120 [ 131.191800] kmem_cache_alloc_trace+0x4b/0x750 [ 131.191854] binder_get_thread+0x1cf/0x870 [ 131.191879] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 131.191903] ? __might_fault+0x110/0x1d0 [ 131.191930] ? __fget_light+0x297/0x380 [ 131.191948] ? fget_raw+0x20/0x20 [ 131.191961] ? __check_object_size+0x25d/0x4f0 [ 131.191990] binder_poll+0x8c/0x390 [ 131.192003] ? __might_sleep+0x95/0x190 [ 131.192019] ? binder_get_thread+0x870/0x870 [ 131.192060] ? binder_get_thread+0x870/0x870 [ 131.192073] do_sys_poll+0x715/0x10b0 [ 131.192140] ? compat_core_sys_select+0x9e0/0x9e0 [ 131.192181] ? perf_tp_event+0xae0/0xae0 [ 131.192189] ? find_held_lock+0x35/0x1d0 [ 131.192204] ? check_noncircular+0x20/0x20 [ 131.192260] ? perf_trace_lock+0x4d6/0x900 [ 131.192276] ? rcu_read_lock_held+0xa9/0xc0 [ 131.192305] ? find_held_lock+0x35/0x1d0 [ 131.192364] ? map_files_get_link+0x3a0/0x3a0 [ 131.192372] ? __lock_is_held+0xb6/0x140 [ 131.192428] ? find_held_lock+0x35/0x1d0 [ 131.192457] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 131.192473] ? vfs_write+0x374/0x510 [ 131.192490] ? wait_for_completion+0x770/0x770 [ 131.192578] ? poll_select_set_timeout+0x12f/0x210 [ 131.192591] ? do_restart_poll+0x2a0/0x2a0 [ 131.192598] ? __sb_end_write+0xa0/0xd0 [ 131.192644] SyS_poll+0x10d/0x450 [ 131.192651] ? SyS_poll+0x10d/0x450 [ 131.192667] ? SyS_pselect6+0x650/0x650 [ 131.192674] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 131.192692] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 131.192726] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 131.192734] RIP: 0033:0x452f19 [ 131.192739] RSP: 002b:00007fde9b67fc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000007 [ 131.192748] RAX: ffffffffffffffda RBX: 00007fde9b67faa0 RCX: 0000000000452f19 [ 131.192753] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000002095f000 [ 131.192758] RBP: 00007fde9b67fa90 R08: 0000000000000000 R09: 0000000000000000 [ 131.192763] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7c96 [ 131.192769] R13: 00007fde9b67fbc8 R14: 00000000004b7c96 R15: 0000000000000000 [ 131.192902] kasan: CONFIG_KASAN_INLINE enabled [ 131.192906] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 131.192915] general protection fault: 0000 [#1] SMP KASAN [ 131.192921] Dumping ftrace buffer: [ 131.192927] (ftrace buffer empty) [ 131.192930] Modules linked in: [ 131.192940] CPU: 0 PID: 18947 Comm: syz-executor7 Not tainted 4.15.0-rc9+ #280 [ 131.192945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.192953] RIP: 0010:binder_poll+0xa0/0x390 [ 131.192958] RSP: 0018:ffff8801bd5b7878 EFLAGS: 00010246 [ 131.192965] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8416d5a0 [ 131.192970] RDX: 0000000000000000 RSI: ffffc900018af000 RDI: 0000000000000282 [ 131.192975] RBP: ffff8801bd5b7920 R08: ffff8801db227d00 R09: 0000000000000000 [ 131.192980] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff10037ab6f13 [ 131.192986] R13: ffff8801bd5b7bd0 R14: ffff8801bbfe2800 R15: ffff8801bd5b78f8 [ 131.192992] FS: 00007fde9b680700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 131.192998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.193006] CR2: 00000000004d52e4 CR3: 00000001bbb73001 CR4: 00000000001606f0 [ 131.193014] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.193019] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 131.193022] Call Trace: [ 131.193034] ? __might_sleep+0x95/0x190 [ 131.193048] ? binder_get_thread+0x870/0x870 [ 131.193081] ? binder_get_thread+0x870/0x870 [ 131.193092] do_sys_poll+0x715/0x10b0 [ 131.193146] ? compat_core_sys_select+0x9e0/0x9e0 [ 131.193178] ? perf_tp_event+0xae0/0xae0 [ 131.193186] ? find_held_lock+0x35/0x1d0 [ 131.193199] ? check_noncircular+0x20/0x20 [ 131.193244] ? perf_trace_lock+0x4d6/0x900 [ 131.193257] ? rcu_read_lock_held+0xa9/0xc0 [ 131.193281] ? find_held_lock+0x35/0x1d0 [ 131.193328] ? map_files_get_link+0x3a0/0x3a0 [ 131.193335] ? __lock_is_held+0xb6/0x140 [ 131.193380] ? find_held_lock+0x35/0x1d0 [ 131.193403] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 131.193416] ? vfs_write+0x374/0x510 [ 131.193429] ? wait_for_completion+0x770/0x770 [ 131.193494] ? poll_select_set_timeout+0x12f/0x210 [ 131.193506] ? do_restart_poll+0x2a0/0x2a0 [ 131.193512] ? __sb_end_write+0xa0/0xd0 [ 131.193553] SyS_poll+0x10d/0x450 [ 131.193560] ? SyS_poll+0x10d/0x450 [ 131.193573] ? SyS_pselect6+0x650/0x650 [ 131.193581] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 131.193594] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 131.193622] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 131.193628] RIP: 0033:0x452f19 [ 131.193632] RSP: 002b:00007fde9b67fc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000007 [ 131.193641] RAX: ffffffffffffffda RBX: 00007fde9b67faa0 RCX: 0000000000452f19 [ 131.193645] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000002095f000 [ 131.193650] RBP: 00007fde9b67fa90 R08: 0000000000000000 R09: 0000000000000000 [ 131.193655] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b7c96 [ 131.193660] R13: 00007fde9b67fbc8 R14: 00000000004b7c96 R15: 0000000000000000 [ 131.193706] Code: 03 80 3c 18 00 0f 85 3c 02 00 00 49 8b be 90 01 00 00 e8 04 f7 ff ff 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 02 00 00 48 8b 3b be e3 10 00 00 e8 f9 88 [ 131.193899] RIP: binder_poll+0xa0/0x390 RSP: ffff8801bd5b7878 [ 131.193942] ---[ end trace 2640248ebce3bef1 ]--- [ 131.193947] Kernel panic - not syncing: Fatal exception [ 131.198180] Dumping ftrace buffer: [ 131.198184] (ftrace buffer empty) [ 131.198188] Kernel Offset: disabled [ 132.062944] Rebooting in 86400 seconds..