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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000011000)=0x0) timer_gettime(r7, &(0x7f0000008000)={{0x0, 0x0}, {0x0, 0x0}}) preadv(r6, &(0x7f0000009000)=[{&(0x7f0000002000)="00", 0x1}], 0x1, 0x404) 2017/11/28 18:58:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00003c1000-0x9)="2f6465762f76637300", 0x10002, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f000024b000)=0x6, 0x4) r1 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:12 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000e9f000-0x4)=0x0) capset(&(0x7f0000218000-0x8)={0x19980330, r4}, &(0x7f0000626000-0x18)={0x9, 0x9, 0x1, 0x1ff, 0x8000, 0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) accept4(0xffffffffffffff9c, &(0x7f0000c6a000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000d6d000-0x4)=0x10, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000ae4000)={{{@in=@loopback=0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000185000-0x4)=0xe8) sendmsg(r0, &(0x7f00008de000)={&(0x7f000031d000-0x14)=@ll={0x11, 0x1b, r3, 0x1, 0x1, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14, &(0x7f0000c52000-0x40)=[{&(0x7f0000a3e000-0x1000)="06f749a34cfdd66ec77f21c750496c0c4859ca121088bdd9a899c9ef5ceb22370a9fad803e9573f2d3fc9412e4f0c5cd585ab241fd9befaaf9f865bf68636ef72d2c63168aa895837b48371b17a67ae8c778dcd5a4544a2f6fce5568f56fb44ae043be8d03abd0e1949b123497824224a1b8b9335c38ed09256db89e5249c59bbfa8d45761a35078d988fff44055cd22791a8c13d9b513f4ad11806a1e289699cdb13bc919f7cae64af3c833b70d8b4160c4237a37c1ae190a16ec886969f96f9faac9249dbcf901abc80c989b60b97a6c680d23b2017449e61b285ec01bdb819e33ef5785f3db7582e8289e46c98bd5ff226e30f09fe95c19808b0b6a27fec1cd71cd67aa2bea53e8100fa7f6aa8627efb9c93689c6b5e94005879cdc4b9d4d47af02b4e988afddc1fd2725ac851214553d54d13e247a51455033ad51be190e253c6b0a3f3937a59b115d495b55214f5ff772f16577c798cdadc67c084b6ccd8a76dcf13b02668cbc5c5c67fedffb793c4129519bf73654c735ac1523f0bc49397ab95622814aac194c047cc26944a51ad243cacd40df6f3956e80a50fa1a61880627a0ee75c84aa53e2ace4afdc1b7c441cfbdf263e1f1f8ba2d9433522091896b6d276047ba5433751947857466e8cc90d2a34fcb261cca5b9b64a4da39469a5822d4e7b6dcc2e923b02e141974ae67232f5ff0fbc1a9a775443abe15efef484846e425047b14bb5183cfb91bd217cc63c6c93f5f6949dcdf9c25f7b8dd728c77ba3924edc91e294007100a3eee18ad34cc40c07591c7a6ab062542ccf41d4fb0adfdb97e5e7e39e1652f14bc2a65073f016fa96d797c8cbe8980cd66932847a99abeee3ce58e18ef7417c57458b4265589ec79f9dc0e26854bb85221170619eac168e60fe90a505b489106e9bd14a3ebbbb6f1112c43a47f0c6ddf306072d17de8ce7263c35ab7717200b0cbe3e2d964dccbf438a43819faa6203dfe48a2fa83cfd368c244758d0befc4177677c14a439ec95f4e51dfc2eb136c904b0f2691a1e834479f4300a4ca50dbb971fdb361266cfc8afaab89d46a8dcf57abb34160a3ed4856bbe20b9c70a9fc484a564fb36cc37da6d31e852aa7d9ec39b28b71c29687638639611411e9783786b1334adb9a9b6d3b9836af3a529fc72be5bf8d4b9d8c51339bea14afce494deecea1f43fbee09e9da3db78ffc5edcf57137df7d7d5a7ab9b94c1628c9b657f2a548e83e111e02484a42626949f8b516263c29f642909737428d69d0b4dabf73e64356c436ebbff8c60602f5a84099a4f20f7e2510ff5faf029b6c75401c868c20180c06a436f4e463afb90087eed7a4b1d986e58b65517ce5ac560947661a5ff397784e323d56bca9f170cab392012b5d3bfb03b0399c14ba9fa6a2cc667d5d6d5f02af8d56bb674260e7d568dd4a0d6d3d385ba88c65a71534550c8fe38d7cc186277823060dfab37acdac6c905dd4e69dce0bb209323c5602751fb44ef5e60a09b58029439d72eac552c6fad4d1c12bff7cda2fd6e8224175b1fd3eb81b3e19f9427b17bfc7d4df5449289f4090862debdea3d85a305a218b796c98295a6eb292a4a5b9d9ee60b04dd9d4229c15d3707c61bfa9c4a04114dc24f679baf958f517b70d4306ac9e805f07d481273eec33381851cf16b747eebdf9a10c0b31d567985ff22537e9f686aa64385dd8196cf562ac76904015d8a2bc9137f7c95b3efa4d2bfc3e1a2cf10aa68ebe6e02fb4c7163f916ea48bbc7ab4aa6768f4ca27fb72e8639cf7ba8bd377ec9ee9383347063648c1a8e0a4de193781c6efc88e856bb9b6adea9653bb93168c5e4b6e1e76d614bb5dfb5203c9a2f0ad39e5b58e1c53c62b27235aeaf3721640ea3d0fb180a970c62cf9eac9807672acfaf7c088078e107358f40ff9f97dcfa12f8a60bad85f94e0f4ca9ec352383000e00233f05153b82d7157000349d9c09ee23ea26ece58779bece0e201241f6d18ee87bb61470e6a51a1b5950a859d48fdfda20663da7a4fdfc70d60829d64d319a04b925f61bc6528c143fd8f08175963de5ffd900b31d3715dd5cafe193429cc32deeb5cacea5dd90cd849298602b0525db30bcef817b24436e8cc5416f8e747743892d76d19fd8382ff2aa4181ddbe305ec718e1a47f3553a7392f1abb58a3f41a0b2a0f64986f7b204172fea1815c88945dd43daa203270e6340ad2115587720d5ac141eaf4e999e80d0bdce69b9fd587306c743f01377672abc1c359c6d816cb0a5e587569a9bbe0265a13da785ef0388cb605fdb61952de1bb696b4cc31f692ec23886f1c20c63242b7e6f8ae50ac6aa07103fbb2f98e991ea24c9a9011299272e01cf6ef3cf9d811aba30d1759a889cd5d873070638f49f24182e9df868d1e823ba447a0f76904209decf93a865a394549ac13f7a4f6546e6033120ceef2d60f4a37c355b1eccfa73b00a1e11c70f5ba04894b3b079d4a9224d3bd4c400b9f862a05e499222186752953d1be8649086ab809ba09a82a0736a9e2204fc75f3c59f8fe494cdf3788df2325a155bcdc51e21486f4d744d60b70675b916e1284806db90327e75c2eaf0050fbecb7e435e000461db35eedf08430c8c38821321654c3e2ec3b6d877145ee548efad890c6aa5e4edebbe9e5b449fa643bb74284cdecc1751cc18910e80c33476fd81d8226bd84d390f9bac1f07b528f42160371ef07c38236306e656bc447cdd96dfe9eb50a8d8aeab403520c8884a9b30a37d70914825dc66837a5f2c03991d96fd3e28f232a2fb19d95a04412f055c16ff938968d684a6ed7a6deba6654a2fdcf2beb12ecfcfc3fcf3d048ffaffc98d07836004ecabce757ff05522e6ab3a8ea83d2c2a2bf5b3d1bad295a2f79e9f0f9103588b022e60d3d00c95cc69d0373b67c68dbd4f156abc0b8052ac8428b0c6683e28dacb07bcd32cd268026a9e08c776a683edb53d5d3a8e5c2ababb6441b07a613f27cf0d8717ad8b870de32e825a91365180dd6da5975b70c12eaa65090fd7aeccaac1c45da3771b5505f5bce905cd03cb291bb0ff1f4d03fa071c071558c55f9f9f718ed6be85d344ba0d773f65dda5d9092f7447c14777d4e817960b17a0361569bf58d600445dcf3222e298742b69280f95da984b8c819a740e86d046a591da857b56a29eddbe5be286dad75e6fb0a5a3370e6c4611d13577d918914d9dd0458d85cd19f32f0c26ec919692d694613be9c24a330ef5e38faf15383e245e3eca3aac579a0b72b24b99c3857b983a276d81d04bda84db7502ea2aca13493856c953cc994d2e11cd7d2253cf3962a784bf2e94cf91081e346fb2a48f71c603c6b21373ef4331d3b07db12fe4b8237ef0ba37928717312155b59e449d10a29a68858dead66bfed43aa849fdcd9aaa65847b2e9ce65b527abbf150765d188a63df984b96c4c426f69932a9076cf30210a9857fafb79c8a0d63c3d8eac64ab7871fcc2dcd1250732ecee91ac67c1505e0310cbfb80e3781ea3a02092c871e4fc6b02714c10ae769c49d6996b755e6a86437c8880a4ee7ac49afbed745161ced51e1afbd66c934aca4773cf9bf96f20f4c3c85400b00a7ce067108bf614b49ad0e7b6a407c10009b469bd65fe8b711adf830bded54dc19379122f65e8a1946eb9172bdeaea1aaab22bba3f794eddc7d2752369a650b8d90c6b264d68221d4c40f60789abca634500f87357565ddf0e2a033fe0de1927b10e046953654fcef45926c78bbc66035ae74db7121f6e8bc878791815d4934592778f36d72c72be83f2e88e6f362659b97834e2ce5bfe8f248f20e7cd5d88e40f52732153ee0d592d7d634fd1548d36cf3a159471b6f76d10ebedd890999b72a9bbe3fffd838fdf7bfca4acebce8415a1aead3f3007b6059cdb5391d942d5c01a346dce94859dccaeac0803d73a06d10d6d7f9e59bc5e747bfa932aeadf21ae8a8c14795f548fcaae924551a644a8e100fc2bc5a33b9209cf6516368af02b145b8d2ce11fe4d6b90db74fd2b62944076af6f5fd057d296167b6ac3725e4e95660cc8361320881d01b65b2baa0ef636abbf8089202eefeb4f3e0a221f15be60d623ae488127c8e9bf36c58cd6a9d35a32333b0400316facb572e7094595c083088365c40a14ce981d500cf327bd26de073a434fc592afbac212b87a7acf405c751d7aca4a562eb60453855e30b313ccc15e302e0e283d2c57cac6e2d8773db9477f08fcb22c654081fbb4473668b7ff7717de69c39fb511a89d1812fcb88a4df782c6a9e9fb664ce8ff0baebdd7007a9e710cd90679bf290cecf559d7376e1936b1ad143673472993c030a6f58a7e18221b94afd9425c0a4c09ed342015e42d072fb362ddedfc2b05996253d4b5c0b027e202a9677c73abd6171ff086ac0782ba3a496a4c44a93465ec9984bf49cae2e030533c05ae1af83ef579237fabbf01b38b2791141743a4861f25c1c627d7bf698b8d6cad7fb239039fb9d16babf695eeab456a6ae8d3041a6e8a12e8f4376b2f2a3e08bc9e01ab1544a3428d8dc9b46fceeca72648b4837fd1733014377574ac85a4b03faf341e99a586846c11458fdca1a4c56562242c71ea373f9e9ed77268bb5b791ea91421c8088d35a4809c1027ef0b4bdb8bcb9d51d726fe065f1d26e57ad1f28ea8e35895db0e87839665416fc6a32118e64e5200e321f26e200adb0dd80af430a6ea1937519dbab08f42a9b3e15a9488124054c91754bbf109573f48f102a663594d55f8bbd280e80211c1536dbeecf1c1583e9696975c63261a175991342f06112cf0f40f1f4732b263b38ba278e9324eabc5e1634a9488c93ad011754881c4ce38df9ad7828d71c8d81c783b599e6afaeb4215779de534ffeb6c455d0b16c23d7fe97f8432fc71378a9d77f761522945bb0361706f4d5184c37473ef570dd6163403c28af39346d3974c985bcd25d70899f4545e325c2d3f6c78c217a6a4f6d50fd99f59f37cd45e22dff6ce80658dec413172d4fbb4f3cb5fa44b6a3fd1de8b458eb00951a1ce46bb93435f451b48bc5fe8ac1a393f3a9762269f9ff5b1495513a61cc7c5f96aabd9515a15d4bc2095e76b14eb99d422678fbac1914a1e343d23e8f2e12951747b574ec20e9aeca2c9a6365403699057e87db0326047c465b1eb642a8bef6e93d14051c806a66ba24d3bbfb024b514d2b1ca86cf1f52522c8e58f7cece976ba96df741ffc4d8256fc0f93e78fd2b57433179fffe7ae5c11adda6c159346723923b82a5a78ec8575b6b71e5d61909f2463c1a6acecb346601443dfaf9db94eff9108577ff9a816c2519baba22e74cbaba1d9201d725c77aa589429c940e309d0823d55a230882118dc9d92a48296cdc710bca510a34d63c038f97577515178841bc7fce7237116619920ec55f243a66d944bb6818e80f85cb7ddbf98e329ea55080263fc843655a146e82849053066398421d420db68ff36635b7b073a1213d55bf78b6aaccdd26a9ffdb75c018e02fb091a13cc99400299585223b12638bec26bc2aec77d68260abb403eb474b7e5d8e9ead4d29d3fbd6128d6772114edf65a4155a7e6729b4da646ce2220e238a897401ad3f32016b3b7ebc15f2f94b7d135a54f3cd6dbd66d682731b3c58f090ca4aac53dc37dcbdce69875c66f4f5613ca4aaf0a50d47b566b5ac091e5d446f1cb933e097ed481c463a5df95492a575bd83933a0a3d30c4327590cc571331f4649df4901ab82f1e444e0db359af7b26dd13fba941496b870082bf93", 0x1000}, {&(0x7f00006d6000-0xd)="0530f3beca45e87c4d96d14f53", 0xd}, {&(0x7f00006db000)="c4e50ee78e64713057c08fcce5bdf8e9576fe85c30244821de84cfdbc2ba2113108d1b1ce0a76629846f561409b464c320e99dbbb1ef8d8c7f12baae766c24e59c0faf49e6f46ece564ba2c68388e3c98c6c88", 0x53}, {&(0x7f0000080000)="b30d45e90868f00863fe8f1c6bf9f87c5eaa2302cd33cf1b10b248e8188855", 0x1f}, {&(0x7f000001b000)="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", 0xfe}, {&(0x7f000031c000-0xe9)="79e8edd8f1e8f4fd15ede3672490a6081a034ef68393266005cd804f019127c47cfcaf152c818b59209146a5eec249d827eedeb459ed8317595c6a10ae4947ed98e87a3afd4ed730b3fb777e241a37f0a7e1c701ec481d2694bccfd2570ee2ca01f6ebf975522c57aa171c459f33f2fcd113674ff0020d26e67fd4f411170ad373bfc1e488344ede17d044798d905a2a6a78ab8571c7fa8b9b5e2f599006d8d6af993dbed5443d28143733ecfb8c80d6d04b101ecf83d964fd0c7228743c90cd5598cfe74cdd3f71c6c1a305059d017c40a1401acb04e4910440683bb10384859923dc9322df38f245", 0xe9}, {&(0x7f0000629000)="931e1af64ef7c1815a2170429532974c3aba8bd90fd19db84c2edc7494f12d2609096385a98ae176807d27a792dd91b48ba429b398dd7702f5b6517047d38a", 0x3f}, {&(0x7f0000730000)="7bcbeadcab0d2dd62fae56b3513c257efb2053e6007503806ddde11863fe4a30635285a4ac34eb6f7683f06aa63e74d0d506103c871bf798a4ce2f1309f8b677b881e32a721ff27741e22a310ee0b05bc76c95491ab1908908e28147c999d258a3da96d826cb0d805e033d053a8630e6378da5636cdd595ce8498d9a115bd28b1ccef09664", 0x85}], 0x8, &(0x7f00004d7000)=[{0xe4, 0x100, 0x1, "b679df43a3a209dad36b572c0c97cc462295007f981b320b80d7aa1b020d9e4aa04edbda7d76ecfe24839004f3e03e31cd1a28b193c75b85f89b6c74010f12a56bd0837cbea47983a156f7bc499c948bcbd40c647ab0fd053cb33cf84a95643137a03a850f66f25950be2e5f9e65fef5ac43638d7d5220fe43b022b5042dc81dc79eb45bd501b10f2f16744c43fc531ef5ecf92f24cb924beb23224b4683ba991853940629f985aa8d6b53692c7041559c479935f5f39005a8cba43a0d3d4b04669865042b0358fdbf64b4b5f0ada2761ca03851296ee0"}, {0x30, 0x103, 0x1, "438ca5793a2eac1c4e31d280aacbf829ac2bb3f62c579b0747cc006efb48407bd1d5"}, {0xe8, 0x196, 0x4, "b65ce2abab8bf64d7615c89cb8f38c7aeaaf9d8b9c2290d9c285abb6064872168da8fc79f9dfe2b35426863be359d4421bf57665ba15b4316998a796176af04d650d1e179445c00d8cf9125389a3d5fcba63552ed0d9aa66f7f19e45567f41dddc9aa59973523e0994ff1536e4e00e9791abbb866d1a13cc11713bf492a8e4375e4e38605cd14ba810bb3de93ee812048f2b2f9289de26552dd5f5d195ad03c2c701e240aa3126bbb59dae5e2648cb6b212793c6e31a23a9e6457a8b23978e16b84a79db9646bbb77d3f7d7cba85079bf023a6f7897e1a6a8c6c2ae3"}, {0xa4, 0x11, 0x1000, "e3e16d21ec2437e3bc32e7efc151fae20a3550527f004de4996d6832f212b7561f8df8a826ae0e59d6f668ed6cb48d0c3d1710e8203f938a64a1b6bc1ee99f60961449b691ee93eed5826a015962426c7cc4aff81158b24a6aa6d08502204630dae9e9ea7921e6fa66b13dc398f6d7e8621666cd7dabb5af6cc80186ea2f4f71c598027176f072814e7b273af3754ecfb4f6932498c6"}, {0x18, 0x1ff, 0x80, "e4d890ef21935d93e1"}, {0xb8, 0x13f, 0x7, "0e8df89927f839827b30408cad0fee6c8c85e7316a17d3d629719875cae4882aaed99bbcdfd611178ff11cbd698d6f94f106c804ee0e1893f0b8a2e5fcd8584e06c2a65f50f714ca26c0398f688bfb8d3f8d6453fe8784365b86efd69b3af81d233a5b21e472ceca5816e35a788bb70cdb64fe06796d858ea505b67b1dc923f576314552f0c4f949c362da8e433098e7646e3db9ceac172d0c586ec417ccf7c412c6ad92ab22a25a2f"}, {0xc0, 0x115, 0x2400000000000, "c294e96e24ed255f78de02867137309a1b668d220dc029344b44b977be63880ef777a133d3570124da7ccf07f29b2befe54c2833eb62511873cf2d804152530f01681b4f4ea4e51ce933e7e636b6f7ec12ee4ac7dc4a5550c7f1786828506bd533cc92acd4b939d58cc246d34d9b1c79dc259d41f13c3ea9e705d91ad39210f90b17376de8db992c78a677ad7c030b58301ea1a271160ed0bbf2aaeefc09856d603238bffb4c7bef2d17ea21d60af9867b"}, {0x28, 0x84, 0x1ff, "b5b251136b5d4d651114ce619af6077191e300ef2920640e0cbf7043"}, {0x100c, 0x104, 0x9, "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"}, {0x38, 0x0, 0x6, "cbca1ced6beee22dde17e3903c32f751ac9fbcb49bd7fb9db9e96a3015db0eae318116964977412338"}], 0x149c, 0x20040000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = creat(&(0x7f00006f3000)="2e2f66696c653000", 0x49) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00004f3000-0xc)={0x90000000, 0x0}) syz_open_dev$tun(&(0x7f0000bb9000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x3fefff) 2017/11/28 18:58:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000418000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c59000-0x11)="2f6465762f7667615f6172626974657200", 0x200440, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000d4e000)={@remote={0xac, 0x14, 0x0, 0xbb}, @broadcast=0xffffffff}, 0x8) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00008eb000-0x8)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000d3d000)={0x10005, 0x1, 0x4, 0x2000, &(0x7f000070e000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000dcc000)={{0x8, 0x8}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x50, 0x40002, 0x621, 0x3a06, 0x1, 0x2, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 197.375287] binder: undelivered TRANSACTION_ERROR: 29189 [ 197.414893] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00007a9000)="2f6465762f696e7075742f6d6f7573652300", 0xfffffffffffffffa, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000da6000-0x10)={0x81, 0x7fffffff, 0x2, 0x6}, 0x10) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f000030d000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000bd3000-0x8c)={0xdc, 0x7, 0x9, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:13 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0x9)="1f73766c6981753800", 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f00005ef000)={{0x0, 0x0}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x802, 0x0) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000209000-0x4)=0x0, &(0x7f0000008000)=0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:13 executing program 3: perf_event_open(&(0x7f0000d85000-0x78)={0x0, 0x78, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000216000)="2f6465762f6877726e6700", 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00001f2000)="2e2f66696c653000", 0x7) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) syz_open_dev$sndseq(&(0x7f0000fb4000-0xd)="2f6465762f736e642f73657100", 0x0, 0x4200) finit_module(r1, &(0x7f0000000000)="00", 0x3) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f72666b696c6c00", 0x10100, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000012000)=0x402, 0x4) r4 = socket$inet_sctp(0x2, 0x10000000000005, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000c9a000)=0x0, &(0x7f0000857000-0x4)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6d000-0x10)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x20) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000f6e000-0x4)=0x0, &(0x7f00001d7000)=0x4) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f000099a000)={0x7cc0, {{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x5, [{{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @rand_addr=0x7ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x340) sendto$inet(r5, &(0x7f00000fd000)="ad", 0x1, 0x0, &(0x7f0000b48000-0x10)={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000904000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000044000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f000063a000)={r6, 0x400}, &(0x7f00004ba000)=0x8) openat(r2, &(0x7f0000d38000)="2e2f66696c653000", 0x400, 0x10) ioctl$TCGETS(r2, 0x5401, &(0x7f00001c6000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40046432, &(0x7f00009f4000)=0x7) sendto$inet(r5, &(0x7f00006a4000)="4d", 0x1, 0x0, &(0x7f0000a8d000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000280000-0x8)={0x1, [0x0]}, &(0x7f0000c4a000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) inotify_init() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 197.434081] binder: 25848:25851 got reply transaction with no transaction stack [ 197.466160] binder: 25848:25864 transaction failed 29189/-22, size 0-0 line 2755 2017/11/28 18:58:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KDSETMODE(r0, 0x4b3a, 0x3) bind(r0, &(0x7f0000b5e000)=@ax25={0x3, {"6c84308b474dfe"}, 0x9}, 0x10) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00001a8000-0x4)=0x8, 0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000c8b000-0xa)="2f6465762f6375736500", 0x2000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f000070d000-0x4)=0x2, 0x4) r3 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:13 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x0, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:13 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000bea000)=0x3, &(0x7f0000ac1000)=0x4) r4 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f000041d000-0x4)=0x0) ioctl$TIOCSPGRP(r4, 0x540f, &(0x7f00001a7000)=r5) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000278000)={0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000628000)={0x1, &(0x7f0000cbc000-0x8)=[{0x80, 0xfffffffffffffff7, 0x0, 0x80}]}, 0x8) readlink(&(0x7f0000c87000-0x8)="2e2f66696c653000", &(0x7f0000272000-0xd7)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd7) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000085000)={0x1ff, 0x0, 0x10001, 0xffff}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40086439, &(0x7f0000646000-0x8)={0x561d, r7}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00003db000)=0x40, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 197.518445] binder: 25848:25851 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 197.545541] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f000025b000)=0x4, 0x4) recvfrom$llc(r0, &(0x7f0000141000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7f, 0x22, &(0x7f000048e000)={0x1a, 0x1d, 0x7fffffff, 0x7fff, 0xffffffff00000001, 0x9, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) 2017/11/28 18:58:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00008b8000-0x10)={{0x77359400, 0x0}, {0x0, 0x0}}, &(0x7f000090a000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) timerfd_gettime(0xffffffffffffff9c, &(0x7f0000d9d000)={{0x0, 0x0}, {0x0, 0x0}}) timerfd_gettime(0xffffffffffffffff, &(0x7f000039c000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f000031e000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) futex(&(0x7f000000d000-0x4)=0x100000000000000, 0xc, 0x1, &(0x7f0000fd8000-0x10)={r2, r1}, &(0x7f000049b000-0x4)=0x0, 0x0) 2017/11/28 18:58:13 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) [ 197.586099] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00002c7000)=0x10001, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000695000)={0x0, 0x0}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lstat(&(0x7f0000e0a000+0xddf)="2e2f66696c653000", &(0x7f0000280000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() setreuid(r4, r5) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000f50000-0xa8)={{0x7fff, 0x3ff}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x10, 0x10000, 0x8, 0xf0, 0xf0, 0x3ff, 0xd464, 0x0, 0x1, 0x10000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000c36000-0x9)="2f6465762f73672300", 0x0, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00007a9000-0x10)={0x3000, 0xffffffffffffffdd, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) pipe(&(0x7f00007d5000-0x8)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0e05403, &(0x7f0000d23000)={{0x3, 0x0, 0x1000, 0x3, 0xffffffff80000000}, 0xf5d, 0x2, "69643000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "74696d6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x3, 0x8, 0x800, 0x7fff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/11/28 18:58:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f000083c000)="2e2f66696c653000", &(0x7f00004e6000)=@random={"747275737465642e00", "5ee65e2300"}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000078e000)="2f6465762f76637300", 0x501141, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000672000)=0x7f, 0x4) r1 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 197.663703] binder: 25885:25889 got reply transaction with no transaction stack [ 197.666918] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x7fffffff, 0x4) sendto$inet6(r0, &(0x7f00005b5000-0x4f)="0b49646abb94570184df489728e8a32eaa63892cc0049cd9c7e85a1e0d222121f4c1f5a074d409c70f4ea7380f1b07e4a9fb45876421664022e76674e031660dcb2e3be896d3c05f925d2a88c44d67", 0x4f, 0x8080, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000964000-0x9)="2f6465762f73672300", 0x4, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000e8000)={0x9, 0x3ebf7194, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/11/28 18:58:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x3, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x1, 0x0) [ 197.672956] binder: 25907:25908 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:13 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x0, 0x2000) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000295000)=0x0) clock_gettime(0x0, &(0x7f0000eda000)={0x0, 0x0}) ppoll(&(0x7f0000cd3000)=[{r0, 0x10, 0x0}, {r0, 0x80, 0x0}, {r0, 0x4440, 0x0}], 0x3, &(0x7f0000f05000)={r1, r2+10000000}, &(0x7f000090b000-0x8)={0x6}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000065a000)="2f6465762f73657175656e6365723200", 0x101000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x8) 2017/11/28 18:58:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000ac7000)={0xffffffffffffff7f, 0x5, 0x1, 0x7}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getownex(r1, 0x10, &(0x7f000080c000-0x8)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000d55000)=[{&(0x7f0000f98000-0x22)="00000000000000000000000000000000000000000000000000000000000000000000", 0x22}, {&(0x7f000062b000-0xd7)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd7}, {&(0x7f0000701000-0x15)="000000000000000000000000000000000000000000", 0x15}, {&(0x7f00004ab000-0xfb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfb}, {&(0x7f00007fd000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3e}, {&(0x7f000021a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xac}, {&(0x7f00009de000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2c}, {&(0x7f0000781000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000761000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000a15000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}], 0xa, &(0x7f0000591000-0x10)=[{&(0x7f0000a0b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000d91000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x70}], 0x2, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:13 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) [ 197.672969] binder: 25907:25908 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 197.672986] binder: 25907:25908 BC_INCREFS_DONE u0000000000000000 no match [ 197.672997] binder: 25908 RLIMIT_NICE not set [ 197.691265] binder: 25885:25900 transaction failed 29189/-22, size 0-0 line 2755 [ 197.728473] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 197.737102] binder: 25885:25906 got reply transaction with no transaction stack [ 197.737117] binder: 25885:25906 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 197.739769] binder: 25885:25906 transaction failed 29189/-22, size 0-0 line 2755 [ 197.740950] binder: 25885:25900 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 197.740959] binder: 25885:25900 BC_ACQUIRE_DONE u0000000000000000 no match [ 197.740966] binder: 25885:25900 BC_INCREFS_DONE u0000000000000000 no match [ 197.740976] binder: 25900 RLIMIT_NICE not set [ 197.742600] binder: 25907:25932 Acquire 1 refcount change on invalid ref 1 ret -22 [ 197.742618] binder: 25907:25932 got transaction to invalid handle [ 197.742642] binder: 25907:25932 transaction failed 29201/-22, size 64-32 line 2755 [ 197.748987] binder: 25885:25900 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 197.749000] binder: 25885:25900 BC_FREE_BUFFER u0000000000000000 no match [ 197.749091] binder: 25885:25900 got reply transaction with no transaction stack [ 197.749099] binder: 25885:25900 transaction failed 29201/-71, size 0-8 line 2670 [ 197.754592] binder: 25907:25908 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 197.754606] binder: 25907:25908 BC_ACQUIRE_DONE u0000000020000000 no match [ 197.754622] binder: 25907:25908 BC_INCREFS_DONE u0000000000000000 node 617 cookie mismatch 0000000000200001 != 0000000000000000 [ 197.756000] binder: 25907:25908 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 197.756080] binder: 25907:25908 got reply transaction with no transaction stack [ 197.756090] binder: 25907:25908 transaction failed 29201/-71, size 0-8 line 2670 [ 197.774184] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 197.779909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38075 sclass=netlink_route_socket pig=25938 comm=syz-executor7 [ 197.781179] binder: 25907:25932 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 197.781190] binder: 25907:25932 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 197.781204] binder: 25907:25932 BC_INCREFS_DONE u0000000000000000 no match [ 197.781214] binder: 25932 RLIMIT_NICE not set [ 197.802198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38075 sclass=netlink_route_socket pig=25938 comm=syz-executor7 [ 197.820249] binder: undelivered TRANSACTION_COMPLETE [ 197.820259] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.820274] binder: undelivered TRANSACTION_COMPLETE [ 197.820304] binder: undelivered transaction 624 [ 197.893269] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 197.904400] binder: 25957:25959 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 197.904413] binder: 25957:25959 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 197.904430] binder: 25957:25959 BC_INCREFS_DONE u0000000000000000 no match [ 197.904442] binder: 25959 RLIMIT_NICE not set [ 197.959678] binder: 25957:25973 Acquire 1 refcount change on invalid ref 1 ret -22 [ 197.959688] binder: 25957:25973 got transaction to invalid handle [ 197.959698] binder: 25957:25973 transaction failed 29201/-22, size 64-32 line 2755 [ 197.966616] binder: 25957:25959 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 197.966631] binder: 25957:25959 BC_ACQUIRE_DONE u0000000020000000 no match [ 197.966644] binder: 25957:25959 BC_INCREFS_DONE u0000000000000000 node 626 cookie mismatch 0000000000200001 != 0000000000000000 [ 197.968522] binder: 25957:25959 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 197.968550] binder: 25957:25959 got reply transaction with no transaction stack [ 197.968560] binder: 25957:25959 transaction failed 29201/-71, size 0-8 line 2670 [ 197.986045] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 198.010798] binder: 25957:25973 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 198.010809] binder: 25957:25973 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 198.010823] binder: 25957:25973 BC_INCREFS_DONE u0000000000000000 no match [ 198.010832] binder: 25973 RLIMIT_NICE not set [ 198.169396] binder: undelivered TRANSACTION_COMPLETE [ 198.169407] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.169424] binder: undelivered TRANSACTION_COMPLETE [ 198.169455] binder: undelivered transaction 630 [ 198.307062] binder: 25885:25889 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 198.322087] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.327577] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:13 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000001000-0xa)="2f6465762f696e7075742f6d69636500", 0x0, 0x402102) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f000024d000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0xa, 0x0, &(0x7f0000000000)={0x3ff000000}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000032b000-0x8)={0x0, 0x3}, &(0x7f0000a5e000-0x4)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000912000)={r2, 0x9}, 0x8) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000096000)={0x5, 0x78, 0x6, 0x9, 0xffffffffffff7682, 0x6269, 0x0, 0x5, 0x0, 0x4, 0x0, 0x7, 0x6, 0x2, 0x0, 0xfff, 0x2, 0x400, 0x400, 0x200, 0x95, 0x0, 0x0, 0x3, 0xffff, 0x80d, 0x0}, r3, 0x1, r1, 0x1) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ba4000-0x18)=[{&(0x7f0000279000)="e72a96f62bc9839194640dafadd0023ba1bd3cc46878c95112201f7d6d3f17f5cf32ada42046c50a9eb09b55ab2cf998860a964511702fbe2a860cf78f354b4a6777d9cafccfc71d6fbdb29a5b417360564dac03ac18394f8225cd138f523c10aa66de772eb2daa2b807fe9ba668fa6f5196451e1d02", 0x76}, {&(0x7f0000a9a000-0xb8)="e4300ed95cbe294528331864a4394986cf792de06e1fe88999ba30440c1a1761c9706952ea22b65e1c75bd1ad7fdfa7e42eb12e8cd7498cbba793b9ef0cbd20d98903db110507bf6194362394738ac38ff440fc4efcce0111fa16f59767d5cc077bb11999346f5ccb9fd012ecaab3b36c8ada2789f90d4306b9c97979d8e2836f465b49357dcf5b1b374a9f3e714826e348b157fe46ef91673f7c61995e2d787f348771e8210313faa1d03bfb0d5194743597d3b2f7a1b03", 0xb8}, {&(0x7f0000d6f000-0xe5)="29f78e2e71f3eadb305d8e8930f3b282b2af5c1f4ad81238cc0688c650fa30ed831bbd6957dfef3f592bf1ee7993686f6ea97a67c48f29d8120961c8c5e31f96818957a627d9e8028e2eaf5ada830d5244a50b93fc9f4b6bd3e0c47c406f424a17f2595d2d9ff17151d44a7a008720a3e9b53f0b58398e4f1e4c0b9da6c26f7228d8f8146ef5220c07164656d4c01da76614585bacccacd52a2f2f4763e28c9c242d70720ff881eb20c5cbd840d8cf37d72d78768d5253cc5a2865b93395d49ab1793215854a8770f748348696a23199a1aebfc7a1c5aa6b598e4623c58021a3f5927c982a", 0xe5}], 0x3) r1 = dup2(r0, r0) ioctl$TIOCNOTTY(r1, 0x5422) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000457000-0x7b)="9b5a847fb69b414bc21c8efac4dab4382d20805354eb813773cbe9bdfc53e5bab89e6975c15ad0b8fed240ba38133299ff3694a6cf053efb4cd8a70fd06674041af90b99fc128588d33c1017137d99946f51d72ebbe0100e639f20d0ad21f1d9430f53a76ee5bb0c12509463b2fb99de9988c9571130fb59e1d497", 0x7b) connect$unix(r1, &(0x7f0000bb8000)=@abs={0x0, 0x0, 0x1}, 0x8) 2017/11/28 18:58:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000d1000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$mice(&(0x7f0000982000)="2f6465762f696e7075742f6d69636500", 0x0, 0x410000) execveat(r3, &(0x7f0000c0f000-0x8)="2e2f66696c653000", &(0x7f0000b86000)=[&(0x7f000022d000)="657468315d626465766c6f656d312d65746831776c616e315c2300", &(0x7f0000c0f000-0x2)="2b00", &(0x7f00009a7000-0x4)="5d7d6a00", &(0x7f0000b51000)="2f6465762f6b766d00", &(0x7f0000a47000)="706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000770000)="73797374656d707070316b657972696e675d707070307573657273656c696e757800"], &(0x7f000043e000-0x18)=[&(0x7f0000531000-0x9)="2f6465762f6b766d00", &(0x7f0000555000)="2f6465762f6b766d00", &(0x7f0000f5d000)="2f6465762f6b766d00", &(0x7f0000b55000)="2f6465762f6b766d00", &(0x7f00007a7000-0x9)="466b657972696e6700", &(0x7f0000536000)="2f3b00"], 0x1100) syz_open_dev$tun(&(0x7f00006ec000)="2f6465762f6e65742f74756e00", 0x0, 0x200000) 2017/11/28 18:58:13 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000e5b000)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000f05000-0x4)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00007aa000)={@generic="46b925e57a98bde2d9f6e23914f95dd1", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) stat(&(0x7f0000e32000)="2e2f66696c653000", &(0x7f00007ce000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000968000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x3, 0xf8, 0x3, 0x0, 0xf, 0x0, 0xa0, 0x5d56, r4, r5}, {0x5, 0x7, 0x100000001, 0x1, 0x9744, 0xffffffff, 0x8, 0x2}, {0xc2, 0x9, 0x2, 0x6}, 0x2, 0x9, 0x40, 0x1, 0x80, 0x1}, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4, 0x7ff}, 0xb, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffffffffffff36ea, 0x0, 0x1, 0x5, 0x1000, 0x5, 0x9}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:13 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x80000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000377000-0x8c)={0x0, @in={{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000828000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00006e8000-0x10)={0x3, 0x8, 0xfffffffffffff800, 0x4, r2}, &(0x7f000093e000-0x4)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:13 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) [ 198.347248] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.373986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51499 sclass=netlink_route_socket pig=25988 comm=syz-executor5 2017/11/28 18:58:14 executing program 7: r0 = open(&(0x7f00003cc000-0x8)="2e2f66696c653000", 0x85ca4aee21da135f, 0xc) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000487000-0x94)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:14 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) exit_group(0x2d1) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 198.397438] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 198.403516] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 198.404883] binder: 25986:25992 got reply transaction with no transaction stack 2017/11/28 18:58:14 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f000018d000-0x20)={0x3, [0x3, 0x6, 0x3]}) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000267000-0x17)={0x0, 0xf, "1a3c5ad5b77196475b52431220f862"}, &(0x7f000037e000)=0x17) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00007c7000+0x186)=@sack_info={r4, 0xfff, 0x71d}, &(0x7f0000900000-0x4)=0xc) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000ebf000)="736d61707300") ioctl$KVM_NMI(r0, 0xae9a) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f00007b1000-0x8)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={r0, 0x4}, &(0x7f0000048000)=0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001000-0x4)={0xffffffffffffff9c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000001000-0x56)="5f859001d9b2855f9e878246f88790933ce458e28dc370d93c1026b1e9139d76870e31729da368ea31b1d8879e0ae26432fe67b6a78438a8978da873a5c39c50714d2fb51581e030a8a43933da6cfe2fefc2918b6064", 0x56) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 198.404894] binder: 25986:25992 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 198.405477] binder: 25986:25992 transaction failed 29189/-22, size 0-0 line 2755 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000a88000)=0xffff, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000cfa000-0x11)="2f6465762f7161745f6164665f63746c00", 0x46802, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000e9000-0x4)=0x10001) 2017/11/28 18:58:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x79fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:14 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000003000-0x4)=0x80, 0x4) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000002000-0x30)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f000077e000+0xbb)={0x3, 0x7, 0x1, 0x3e8}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000895000-0x4)=0x0, 0x4) [ 198.433542] binder: 25981:25998 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 198.433563] binder: 25981:25998 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 198.433576] binder: 25981:25998 BC_INCREFS_DONE u0000000000000000 no match [ 198.433587] binder: 25998 RLIMIT_NICE not set [ 198.434375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51499 sclass=netlink_route_socket pig=26002 comm=syz-executor5 [ 198.451209] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.500435] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 198.525503] binder: 25981:26014 Acquire 1 refcount change on invalid ref 1 ret -22 [ 198.525520] binder: 25981:26014 got transaction to invalid handle [ 198.525530] binder: 25981:26014 transaction failed 29201/-22, size 64-32 line 2755 [ 198.527378] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 198.531939] binder: 25981:26014 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 198.531953] binder: 25981:26014 BC_ACQUIRE_DONE u0000000020000000 no match [ 198.531966] binder: 25981:26014 BC_INCREFS_DONE u0000000000000000 node 634 cookie mismatch 0000000000200001 != 0000000000000000 [ 198.535885] binder: 25981:25998 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 198.535905] binder: 25981:25998 got reply transaction with no transaction stack [ 198.535913] binder: 25981:25998 transaction failed 29201/-71, size 0-8 line 2670 [ 198.547313] binder: 26015:26017 got reply transaction with no transaction stack [ 198.547323] binder: 26015:26017 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 198.547691] binder: 26015:26017 transaction failed 29189/-22, size 0-0 line 2755 [ 198.554105] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 198.562685] binder: 25981:26014 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 198.562697] binder: 25981:26014 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 198.562709] binder: 25981:26014 BC_INCREFS_DONE u0000000000000000 no match [ 198.562718] binder: 26014 RLIMIT_NICE not set [ 198.576442] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.589507] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.589518] binder: undelivered TRANSACTION_COMPLETE 2017/11/28 18:58:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000213000)={r0}) ioctl$sock_ipx_SIOCAIPXPRISLT(r4, 0x89e1, &(0x7f00006d9000-0x4)=0xa378) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:14 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) 2017/11/28 18:58:14 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:14 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) r3 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) keyctl$assume_authority(0x10, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) keyctl$set_timeout(0xf, r0, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00008d8000)={@generic="f798bea57cfbdbf31c49cd80c83ee4e3", &(0x7f0000171000-0x14)=@ethtool_modinfo={0x42, 0x3, 0x80, "effa8934d6c33125"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000e43000-0xa)="2f6465762f6375736500", 0x100, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000309000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e06000-0xf)="2f6465762f73657175656e63657200", 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000ef7000)=0x1, 0x4) fstat(r0, &(0x7f000045a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_settime(0x2, &(0x7f0000561000)={0x0, 0x989680}) r2 = socket(0x6, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x80000000, &(0x7f0000670000)=0x0) io_getevents(r1, 0x5, 0xa, &(0x7f0000adf000)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f0000563000-0x8)={0x77359400, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000c70000-0xc)={0x2, r0, 0x1}) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000006000-0x4)=0x5bc5, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001000-0x4)=0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = eventfd2(0x401, 0x80000) r3 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)={r3, r4, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000fa4000-0x48)=[{&(0x7f0000ff7000-0x1000)="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", 0x1000}, {&(0x7f000003f000-0x1e)="051cecbe415ae7005e54b5e6e64cb2381a4e57f866748898bfe1e5a71b42", 0x1e}, {&(0x7f0000216000)="0b370f8aee1f96b071407f29eebc0cabc0c445c6319069204c871edeadb6c17e9a660f221a0c165155cfef040bc985abf06a1ca04784212b7f4c0457b4322206be6aa4288f3641617a4904843572101a4b85f3afce3746dae74c3bdd73321c78ea144605297616ec4840bc0dd6ab3e85481d69874317ad4634367485f1f4a291d232dfab82d7e53b5949c7e0fa73e8eb87039903d906c64f2672eabe296110397144c0e8df5399eba5205aabd3", 0xad}, {&(0x7f0000bf6000-0xba)="e43a24926e7fd6ad885e0c59329d80a4ce3619ee468ffbff6dc0f9468ddf0fa7b3f621b9d3cd0ea9d59829047f58a78bbe12e3e1a9b5f368c9132c073cebce58862fa0dc393cc6101d3691290d85402d3a6d931ecc4b44df8eac5080561967fa78e254a45ef93beaa2b95700b23832e3a803550aab8526847b451f4959ed2471cf653b1022c60f8f4c5334cd6f8f4032d8b0fc961fd6467ab88321622fb74395aa8a773e292fe9ca20ababe6a44260ddc0bb252bcd607bf7553e", 0xba}, {&(0x7f00005f0000-0xcb)="27d14e3547387088f839ed5213a15771c4f9d47c1f86462d41eac3cecba1e43c9eac1527beeb77efac9d535a2f6b2131a9c526d046fa7c27fb5e1903fd47a2377be98b2fe013af916b26d0cc243969b54f7f487de7d321618f4c01827a24f94cbc9ced66b96cd57b6c7fa781cbe29cf57b12273549c9bc776bfe0b8a7207f539ddb294dca29a6d4e9b966d3fed214caaa8fca80e8aba279419114d0f9acae9a7423f418e33e6059b4a7d3d352b4fc6674373fa5f24849bd41a0711df7d4a53c90aaf56f9602ef11ea38062", 0xcb}, {&(0x7f00007a0000-0x71)="2ebaf0f60812c1c767a18bc5d604c9cb9791e13e3b19b9d1827ffc103bee532098aa0eef9b7069f30e68b8916507a5a4f14c8f4c19e899d503f5b31af4de15ee41de64879c075f8c040373fe040b73110c7ef5a89fd34b84f61de5d5890c89642ee2578838347c73e20f63747bf015e077", 0x71}, {&(0x7f0000a1f000)="046f90357be85be83da460a21c29546b9e41d20e526d57d23d9296f6c41b0a95e68141a4134c56d8f73e73d3a213b69c5c67f28f6c53e535f85418ee84703ca735955f1bc3e34bb621bd062ec847bac7f96eb6aaf8b5dc30e5cc8e178e6168b0f2266b80ad1b6eb7dd5b2d871d2ee6735c44c3cb143bf6795d652dce2d332d706d430c903724d612dbee9000ae5397bb32d0889ef6d6f3ce3c110af32dbd192ff75990ae1006033f365eb65d2d821ba7652102d515773667", 0xb8}, {&(0x7f00004a6000-0x7)="2a8613224a0f1a", 0x7}, {&(0x7f0000c08000-0xf9)="fbf714729e63dff44c4ea03f65ad7b2952002a972c53b2c0d272023e36e4240ea29eccee198bcea5594c9d181fb614db6d0c86710254271fc8b4a6d558b0d006a3cacd26259bf7f70beaad81b382ba8cdaa7da8cb14ca58c93e6b0a9de1bcc120eb67d0a494c80aa500d46f888f5850c6632be19036339afc122fa8e848efb1e255fe8019737064f985d62651bc6a0adede74177d925eeca3bdbe4626b2baf2e4976ebafc2f8fcf4a9e5a4a7672a54cbc2e7f4f3aa52f204c68fadb130718b859a7798eaaa996f78ce7e982c5eb4c470ca329b1ca23251a00f75c043819ccae51f95ad5451334145692b78faad467f78ede944321e6525a356", 0xf9}], 0x9) 2017/11/28 18:58:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x5, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000423000-0x12)={@generic="8d584755c0f81c87510de1bd7f6b3576", 0xc85}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f000057b000-0x8)={0x2, &(0x7f0000148000)=[{0x0, 0x0}, {0x0, 0x0}]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000b1e000)={0x0, 0x0}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000-0x10)="2f6465762f73657175656e6365723200", 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000928000-0x28)={@common="67726530000000000003000000000000", @ifru_addrs=@generic={0x9, "fc6ef4bb060eb41cb4b8f9523503"}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)="2f6465762f6877726e6700", 0x2, 0x0) r8 = accept4(0xffffffffffffffff, &(0x7f0000277000)=@ipx={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f00003ff000-0x4)=0x10, 0x80003) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f000035f000-0x28)={0x2, 0x0, [{0xbae, 0x0, 0x1}, {0xbfb, 0x0, 0x81}]}) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000431000-0x4)=0x0) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x34, &(0x7f000076a000-0x8)="0000000080000000", 0x8) recvfrom$inet6(r7, &(0x7f00004b5000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe9, 0x2000, &(0x7f0000dd2000)={0xa, 0x3, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5ca2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000faa000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fc, 0xfffffffffffffffd, 0x0, 0x9, 0x81, 0x2, 0x0}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000dea000)={0x19980330, 0x0}, &(0x7f0000002000-0x18)={0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x800000, 0x0}) gettid() ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00009a6000)={0x5, 0x4, 0x7969}) [ 198.589523] binder: undelivered TRANSACTION_COMPLETE [ 198.589550] binder: undelivered transaction 638 [ 198.630322] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 198.634055] binder: 26033:26036 got reply transaction with no transaction stack [ 198.634065] binder: 26033:26036 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 198.634243] binder: 26033:26036 transaction failed 29189/-22, size 0-0 line 2755 [ 198.710008] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.908853] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000e6b000)="3a00", 0x1) r1 = socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00001a5000-0x10)="2f6465762f73657175656e6365723200", 0xfffffffffafffe03, 0x0) ioctl$TIOCGSID(r1, 0x540f, &(0x7f0000a99000)=0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000281000-0x4)={0x0, 0x2000000080, 0x5}) ioctl$TIOCSPGRP(r1, 0x540f, &(0x7f0000c2c000)=r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) [ 198.920813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54608 sclass=netlink_route_socket pig=26051 comm=syz-executor5 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6877726e6700", 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1000, 0xfffffffffffffff8}, &(0x7f0000001000)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r1, 0x3}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002000-0x20)={0xff, 0x1ff, 0xc, 0xbc, 0x7fffffff, 0xa4, 0x2113, 0x100000001, r1}, &(0x7f0000001000)=0x20) openat(r0, &(0x7f0000000000)="2e2f66696c653000", 0xf118f724709020cf, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000-0x10)="2f6465762f73657175656e6365723200", 0x24000, 0x0) writev(r2, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00007c0000)="2f6465762f6175746f667300", 0x101600, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000fa1000-0x4)=0x4, 0x4) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000efc000-0x2)=0x100, &(0x7f0000732000)=0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) io_setup(0xff, &(0x7f0000356000-0x4)=0x0) io_getevents(r1, 0xffff, 0x4, &(0x7f0000349000)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f0000772000)={0x77359400, 0x0}) [ 198.947703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54608 sclass=netlink_route_socket pig=26051 comm=syz-executor5 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) open(&(0x7f0000d18000-0x8)="2e2f66696c653000", 0x1, 0x2) 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x17, 0x804, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x4, 0x4) [ 198.966607] binder: 26043:26069 got reply transaction with no transaction stack [ 198.966618] binder: 26043:26069 transaction failed 29201/-71, size 2-1886661253 line 2670 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00000b2000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x20, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000acb000-0x400)={"f348160ad326b1d50cdf63157e8d9d27e9cacc123e8f9fae6db2c30b01c18d968769c2442c1fe733026f68160d2601679616e2a69121d93b7ec9f48fc45c79d4edf08015c7457e0d31a8df5e4ad83f8dbfe56304373aff2a4f7a079cd16efa2c82dee911ee24aea1711e02561bfea90d70204b51611ebd1a52d8d138f82e3083576fb9b98e87dd508994dfa1ab7fb907eb41dbf6a6d9210ff84741c92586751485463ead4876c20ad33ab280c14d2d182d0ef9c50197772695fab344fd483172891da5f8204b91c5eba86a0844c8ec719c4281b8c3cf8ff7f682f4d21a3bf49eb069c694a3cb8390970d58721e99cc0fe4b586d9f92de5aff584452e8e04ffd53d8bc08ba0fdbb01808d90ea540b374b919b7c76f0123febe94ed97ace3e55332c38d3c18e0bbce842c1e3426572b1b22c2bd8c32f4cad96f71814fa2f2bf5d7ae8acd36221a674c3248b31cdbb421d249c17f6a0f3166433e90f4a418b8160d5d0deea2eef953671dba212154a546e454862ec01f0206bd8481969730c16873098203f856eb0308160f800aa234a0901e9cd2c20c6088137fd06078f47a711620540e802d6042a12de2cc3b3d05885d5511b2b55cfaf6fb52684a822b83eb59b11e5ec0f44da8b614ca07ac35f1871af46f38e149665038c2261049441115afe30110797e63d0ca86dfb2b6757d6bf6ff5189c6a77a66abd6ed03964d7c251617443c743df8caacd10431db5ca0e13c202358b859d204314011de83c38bc5da24016ff2b48d865dce7af3f27445044df406de2985aa0851d41a005ce8930f466dc802d67c244a43e7aa6b94253114357a370c35bd7d5f1e9b934676355465141a5fcb5391c0067223a1a67231b5dfffd829202d318da8c019e1c622e2e23ccd4d17ca5ae00736082ded97a3bd3129fe8aec2994192f2781d20a9f44671c088d809fb299078b6eb9bb5f2faa51330830fc845845bb2d8b921b357e9ea938320a3c3e23a1d90a9c681a55be6680d4905c7afd6fbfdfb168fb8ee50200db6575df8aae28c66826b7d9cda1c8bbc8fe1901f1bff7b6539f73c811c7a8d73ceb92f03c3effd23c6a843ae5886ec4e37b945224100a3e0bb51f60a784482f238e126b5ac51b7903ea97f0daaa19234baffd611ca6b933c144847cdfc34d0d2e69e4b4b6ba9a82f5093ba05f2d8c1ef5b5a3f4fcf3a1fc0462d440c72cd9f999250651c03ac2ac33787fe0ab2b7d9b816c9ff6b096d6bc65d0abf0c0fd1b75b186e90c37abebae38ee76ea81fd242b94949468f925dafaa68d9d2d2042e7c6ceb309d88957224baf817c59ca85267af888ee524fff09c1cb6ecfad4ab00347626741653eeb26463f0e94a94c3c56d344ef1c86916aff42a3e0c820e9b1ecee28e84899df7df5c6abe2ba7e0a0ef0a5347bf5947c5d703527f03937aa2d1abc3539143a"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 198.972563] binder: 26043:26069 transaction failed 29189/-22, size 0-0 line 2755 [ 199.027236] binder: 26042:26081 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 199.027249] binder: 26042:26081 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 199.027263] binder: 26042:26081 BC_INCREFS_DONE u0000000000000000 no match [ 199.027274] binder: 26081 RLIMIT_NICE not set [ 199.113823] binder: 26042:26110 BC_INCREFS_DONE uffffffffffffffff no match [ 199.113845] binder: 26042:26110 got transaction to invalid handle [ 199.113869] binder: 26042:26110 transaction failed 29201/-22, size 40-16 line 2755 [ 199.115621] binder: 26042:26104 Acquire 1 refcount change on invalid ref 1 ret -22 [ 199.115639] binder: 26042:26104 got transaction to invalid handle 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) ioctl$int_in(r0, 0x5473, &(0x7f0000921000-0x8)=0x9) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_RUN(r0, 0xae80, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000f3f000-0x8)={0x0, 0x0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:14 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) ioctl$KDDELIO(r0, 0x4b35, 0x0) 2017/11/28 18:58:14 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000aef000)={0x0, 0x0}, &(0x7f00002a7000-0x4)=0x8) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:14 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) 2017/11/28 18:58:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 199.115649] binder: 26042:26104 transaction failed 29201/-22, size 64-32 line 2755 [ 199.240644] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 199.250253] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 199.261206] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$inet6(r0, &(0x7f0000e0c000)={0xa, 0x0, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, 0x1c) ioctl$KVM_SMI(r3, 0xaeb7) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000f13000+0x846)=0x0, &(0x7f0000e11000)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000af000)="2f6465762f6e65742f74756e00", 0x0, 0x400) openat$cuse(0xffffffffffffff9c, &(0x7f0000540000)="2f6465762f6375736500", 0x80100, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000f37000)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00009c5000-0x4)={0xffffffffffffff9c}) r1 = creat(&(0x7f0000ebd000-0x8)="2e2f66696c653000", 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00001d6000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00004e2000)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, &(0x7f0000a41000-0x4)=r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$mice(&(0x7f0000ba2000)="2f6465762f696e7075742f6d69636500", 0x0, 0x40) getsockopt$inet_tcp_buf(r4, 0x6, 0x0, &(0x7f0000703000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000b5e000)=0x1000) writev(r3, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 199.281365] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.296923] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 199.312336] binder: 26138:26140 got reply transaction with no transaction stack 2017/11/28 18:58:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x3, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00002d8000)={0x0, @in={{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000273000)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000d6e000)={r1, 0xf3}, &(0x7f0000cb8000)=0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000058e000-0x20)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 199.326635] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 199.333281] binder: 26137:26141 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 199.333294] binder: 26137:26141 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 199.333308] binder: 26137:26141 BC_INCREFS_DONE u0000000000000000 no match 2017/11/28 18:58:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000793000)={0x1f, 0x400, 0x0}, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000cd4000-0x4)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0xa, 0x2, 0x4, &(0x7f0000a06000)={0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f000094b000)=0x0) mq_notify(r2, &(0x7f00000ff000)={0x0, 0x26, 0x1, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000002000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000008000)={r1, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x4ec000)=nil, 0x4ec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f00004ec000-0x1)="2f6465762f62696e6465722300", 0x0, 0x4873bcbee7cbff19) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40286608, 0x800001) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x3) close(r4) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f00004ec000)="2f6465762f62696e6465722300", 0x0, 0x805) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00004ee000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f00004ed000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/11/28 18:58:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10000000000010, 0x802, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f000015b000-0x2e)={r0, 0x8001, 0x1, "f7e9296635111bc860e6f78a70bec66f3bb4219c096e520f59a1119e9be03faa494b071e"}) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000222000)="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") [ 199.333318] binder: 26141 RLIMIT_NICE not set [ 199.335666] binder: 26138:26149 transaction failed 29189/-22, size 0-0 line 2755 2017/11/28 18:58:15 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) 2017/11/28 18:58:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 199.404881] binder: 26137:26171 Acquire 1 refcount change on invalid ref 1 ret -22 2017/11/28 18:58:15 executing program 5: inotify_init() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000691000-0x10)="2f6465762f73657175656e6365723200", 0x80, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000e4e000)=0x0, &(0x7f0000511000)=0x4) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000125000-0xc)={@loopback=0x0, @loopback=0x0, @loopback=0x0}, &(0x7f0000fb0000-0x4)=0xc) r3 = dup3(r0, r1, 0x80000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00004c6000-0x4)=r3, 0x4) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000c9e000-0x4)=0x10001, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) [ 199.404892] binder: 26137:26171 got transaction to invalid handle [ 199.404902] binder: 26137:26171 transaction failed 29201/-22, size 64-32 line 2755 [ 199.420367] binder: 26137:26141 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 199.420383] binder: 26137:26141 BC_ACQUIRE_DONE u0000000020000000 no match [ 199.420398] binder: 26137:26141 BC_INCREFS_DONE u0000000000000000 node 651 cookie mismatch 0000000000200001 != 0000000000000000 [ 199.422598] binder: 26137:26141 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 199.422633] binder: 26137:26141 got reply transaction with no transaction stack [ 199.422645] binder: 26137:26141 transaction failed 29201/-71, size 0-8 line 2670 [ 199.442825] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 199.443671] binder: 26169:26175 ioctl 40046205 3 returned -22 [ 199.449535] binder: 26137:26171 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 199.449546] binder: 26137:26171 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 199.449560] binder: 26137:26171 BC_INCREFS_DONE u0000000000000000 no match [ 199.449569] binder: 26171 RLIMIT_NICE not set [ 199.450457] binder: 26169:26175 ERROR: BC_REGISTER_LOOPER called without request [ 199.450465] binder: 26175 RLIMIT_NICE not set [ 199.477537] binder: undelivered TRANSACTION_COMPLETE [ 199.477547] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.477564] binder: undelivered TRANSACTION_COMPLETE [ 199.477597] binder: undelivered transaction 655 [ 199.493878] binder: 26175 RLIMIT_NICE not set [ 199.496820] binder: 26175 RLIMIT_NICE not set [ 199.506918] binder: unexpected work type, 4, not freed [ 199.506923] binder: undelivered TRANSACTION_COMPLETE [ 199.506938] binder: undelivered TRANSACTION_COMPLETE [ 199.506945] binder: undelivered transaction 659 [ 199.522440] binder: 26169:26175 ioctl 40046205 3 returned -22 [ 199.534126] binder: 26169:26188 got reply transaction with no transaction stack [ 199.534136] binder: 26169:26188 transaction failed 29201/-71, size 32-8 line 2670 [ 199.537577] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 199.539666] binder: release 26169:26175 transaction 663 out, still active [ 199.539673] binder: undelivered TRANSACTION_COMPLETE [ 199.539689] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.540005] binder: send failed reply for transaction 663, target dead [ 199.563306] binder: 26192:26194 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 199.563319] binder: 26192:26194 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 199.563335] binder: 26192:26194 BC_INCREFS_DONE u0000000000000000 no match [ 199.563347] binder: 26194 RLIMIT_NICE not set [ 199.625549] binder: 26192:26210 Acquire 1 refcount change on invalid ref 1 ret -22 [ 199.625568] binder: 26192:26210 got transaction to invalid handle [ 199.625588] binder: 26192:26210 transaction failed 29201/-22, size 64-32 line 2755 [ 199.640536] binder: 26192:26194 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 199.640550] binder: 26192:26194 BC_ACQUIRE_DONE u0000000020000000 no match [ 199.640564] binder: 26192:26194 BC_INCREFS_DONE u0000000000000000 node 665 cookie mismatch 0000000000200001 != 0000000000000000 [ 199.642450] binder: 26192:26194 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 199.642475] binder: 26192:26194 got reply transaction with no transaction stack [ 199.642484] binder: 26192:26194 transaction failed 29201/-71, size 0-8 line 2670 [ 199.659661] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 199.665868] binder: 26192:26210 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 199.665877] binder: 26192:26210 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 199.665889] binder: 26192:26210 BC_INCREFS_DONE u0000000000000000 no match [ 199.665897] binder: 26210 RLIMIT_NICE not set [ 199.692381] binder: undelivered TRANSACTION_COMPLETE [ 199.692390] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.692405] binder: undelivered TRANSACTION_COMPLETE [ 199.692435] binder: undelivered transaction 669 [ 199.941396] binder: 26138:26140 transaction failed 29201/-71, size 2-1886661253 line 2670 2017/11/28 18:58:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000d1a000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000098f000-0x4)=0x2c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) getsockname$netlink(r0, &(0x7f0000e42000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000696000)=0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00008c2000-0xf)="2f6465762f73657175656e63657200", 0x20000, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x4f6) 2017/11/28 18:58:15 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f000005a000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f000089f000)={0x0, 0x1ff, 0xffffffffffffff32, &(0x7f00006d0000)=0x0}) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00008a7000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000239000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000336000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000803000)=0x28) 2017/11/28 18:58:15 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x0, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0xffffffffffff2b62, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000745000)="2e2f66696c653000", 0x200, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000601000-0x4)={0x9}, 0x4) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x400000, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:15 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) 2017/11/28 18:58:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f000014b000)="2f6465762f72746300", 0x80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000e4a000-0xc)={0x0, 0x0, 0x0}, 0xc) r3 = add_key$keyring(&(0x7f00009b1000-0x8)="6b657972696e6700", &(0x7f0000438000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r2, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = add_key$keyring(&(0x7f0000566000-0x8)="6b657972696e6700", &(0x7f00006e9000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r5, &(0x7f00007f6000)="636966732e69646d617000", 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 199.961150] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:15 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004a2000-0x10)="2f6465762f73657175656e6365723200", 0x101080, 0x0) pwrite64(r0, &(0x7f0000252000-0xef)="fda8eb6d0fca6beaa7f0f6af3b1b9d5e05ef4d36e5812be20e5f92d76640e5aaaf37735a14af3803aa45bc12cdfc1e5b78ce15894e925787389c44c28f9a32d5e51cd3f91f71e6ed3874115d8907c09f03c35a5bb1167d97cb4e8f96450c3d0e1e6f29405f2c6b0741e8179f722b0eb3c4c7312cf3f0c306b0aa18a21370a590f97901404d206c3fc08b024fc532ed7dbc25da8db03adac6902fc7f0c034d50b07f9908bd7ce38d234af5f138f065b62143028035a0934594e4418f91ee90c9ca2fe8996baf4744a4fc8c11c0e9c99949e903a353bc488ecb7e3be9862b69ac979ba94c889636cd7a4290c3dbfbef4", 0xef, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000060e000)={{{@in=@multicast1=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) getgroups(0x5, &(0x7f00003e4000-0x14)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={&(0x7f00004aa000-0x8)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000000)=[{&(0x7f0000bb8000)="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", 0x1000}, {&(0x7f0000000000)="088cc6defb4543e4596bb6c6c093021e843f4d3a7ec9091fcc71a11bfe56558a0e08744971d71b33c54ec0e547f2569fe18c15f863e57f42ffc078ef93a13cf53933a6c943c127f709f747d5770bfb602b909bec4d8704c05db77bf50fcdde4ab5a8ff1d25d45b53c5fddcdd585f0458b95e9088dd728ce8e33310bc810f0ac78ed2139792c2b4eb85d80163db5ded5a28", 0x91}, {&(0x7f0000000000)="35fc9b470f242ba6e0362852dd9c9543d90eb0c64421d90c8758ad61266e2855b175f9a726eccdf108d61a4fe1e265014fd69d59a7d67b0f11678af311b3859f2c2c5bd72f14c38c8fcb7a144d", 0x4d}], 0x3, &(0x7f0000000000)=[@cred={0x18, 0x1, 0x2, r1, r2, r3}, @rights={0x10, 0x1, 0x1, [r4]}], 0x28, 0x40000}, 0x40044) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 199.993477] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 200.008739] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f000055e000)="2f6465762f696e7075742f6d69636500", 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f000025f000-0x4)=0x0, 0x4) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000c5e000)={0x0, 0x6, 0x0, 0x6, 0x7}, &(0x7f0000cf8000-0x4)=0x18) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00009cb000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000889000-0x8)={r2, 0x7f}, 0x8) fcntl$notify(r1, 0x402, 0x4) 2017/11/28 18:58:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000b1d000)={0x0, 0x0}) nanosleep(&(0x7f0000bcf000-0x8)={r1, r2+10000000}, &(0x7f00001a5000)={0x0, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x40004000000004, &(0x7f0000e41000-0x8)={0x77359400, r3}, &(0x7f0000048000)=0x7, 0x100) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00003a7000)={&(0x7f0000aab000-0x8)="2e2f66696c653000", 0x0}, 0xc) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000bb9000)="2f6465762f73657175656e6365723200", 0x8000, 0x0) removexattr(&(0x7f000009a000-0x8)="2e2f66696c653000", &(0x7f0000dcd000-0x13)=@random={"747275737465642e00", "47504c24276574683000"}) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f00002d0000)=0x1000, 0x4) signalfd4(r5, &(0x7f00001c3000)={0x8001}, 0x8, 0x80000) connect$nfc_llcp(r5, &(0x7f00001a4000-0x58)={0x27, 0x100, 0x0, 0x2, 0x4, 0x8, "20d95e0f8c162d62d8a3eb2191cea98c5bcb519661e4015edac0ca9c49293ad0ce347763df9a647416052c2426d76a01b77ca775bbd81c87e947bb04dee880", 0xf800000}, 0x58) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 200.036596] binder: 26213:26214 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:15 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000000)={0x3f, 0x0, 0x10001, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f0000001000-0x8)={r1, 0x4}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r2) keyctl$assume_authority(0x10, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r3 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r4 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000a51000)=0x0) 2017/11/28 18:58:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00003e5000)="2f6465762f6175746f667300", 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000747000-0x8)={0x0, 0x27}, &(0x7f00008e9000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000511000-0x20)={0xfffffffffffffff7, 0x4, 0x8204, 0x9, 0x0, 0x7, 0x81, 0x4, r2}, 0x20) ioctl$PERF_EVENT_IOC_ID(r1, 0x80042407, &(0x7f0000b81000)=0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000c72000-0x4)={r1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000d4b000-0x18)={0x8, 0x5, 0x1}) [ 200.045729] binder: 26222:26226 got reply transaction with no transaction stack [ 200.045740] binder: 26222:26226 transaction failed 29201/-71, size 2-1886661253 line 2670 2017/11/28 18:58:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000592000)=0x7a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$dupfd(r3, 0x406, r0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:15 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) bpf$MAP_CREATE(0x0, &(0x7f0000961000-0x1c)={0xf, 0x1, 0x6, 0xbb31, 0x2, 0x0, 0x10001}, 0x1c) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00006c2000-0x4)=0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000561000+0xf83)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00005bb000-0x4)=0x8c) 2017/11/28 18:58:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) clock_gettime(0x0, &(0x7f00003b5000)={0x0, 0x0}) ppoll(&(0x7f0000119000)=[{r0, 0x83c1, 0x0}, {r0, 0x0, 0x0}], 0x2, &(0x7f0000cfc000)={r1, r2+30000000}, &(0x7f0000de9000)={0x401}, 0x8) r3 = socket(0x0, 0xf, 0x5) getpeername$unix(r3, &(0x7f0000350000)=@abs={0x0, 0x0, 0x0}, &(0x7f0000278000-0x4)=0x8) r4 = syz_open_dev$mice(&(0x7f000047b000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x40040) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f00003a3000)={0x66, 0xa128, 0x9, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2000000000000007, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 200.048731] binder: 26222:26226 transaction failed 29189/-22, size 0-0 line 2755 2017/11/28 18:58:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) pipe2(&(0x7f00009a2000)={0x0, 0x0}, 0x80000) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000f00000-0xc)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f000016f000)=r2) 2017/11/28 18:58:15 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) [ 200.092973] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.112564] binder: 26213:26252 Acquire 1 refcount change on invalid ref 1 ret -22 [ 200.112586] binder: 26213:26252 got transaction to invalid handle [ 200.112612] binder: 26213:26252 transaction failed 29201/-22, size 64-32 line 2755 [ 200.128298] binder: 26213:26252 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 200.128311] binder: 26213:26252 BC_ACQUIRE_DONE u0000000020000000 no match [ 200.128325] binder: 26213:26252 BC_INCREFS_DONE u0000000000000000 node 673 cookie mismatch 0000000000200001 != 0000000000000000 [ 200.129926] binder: 26213:26252 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 200.129939] binder: 26213:26252 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer [ 200.129948] binder: 26213:26252 got reply transaction with no transaction stack [ 200.129957] binder: 26213:26252 transaction failed 29201/-71, size 0-8 line 2670 [ 200.131698] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 200.145896] binder: 26251:26254 got reply transaction with no transaction stack [ 200.145906] binder: 26251:26254 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 200.146522] binder: 26251:26254 transaction failed 29189/-22, size 0-0 line 2755 [ 200.174330] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.219459] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 200.238480] binder: 26269:26271 got reply transaction with no transaction stack [ 200.238490] binder: 26269:26271 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 200.241223] binder: 26269:26271 transaction failed 29189/-22, size 0-0 line 2755 [ 200.274490] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.443898] binder: 26213:26214 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 200.452273] binder: 26213:26214 BC_INCREFS_DONE u0000000000000000 node 673 cookie mismatch 0000000000000002 != 0000000000000000 [ 200.463929] binder: 26214 RLIMIT_NICE not set [ 200.472282] binder: undelivered TRANSACTION_COMPLETE [ 200.477404] binder: undelivered TRANSACTION_COMPLETE [ 200.482518] binder: undelivered TRANSACTION_ERROR: 29201 2017/11/28 18:58:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000573000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x401, 0x4000) 2017/11/28 18:58:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000be3000-0x8)="2e2f66696c653000", 0x480080, 0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000318000-0xa0)={0x0, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x1, 0x200, 0x0, 0x100}, &(0x7f00002b7000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000d2a000)={r1, 0x7}, 0x8) futex(&(0x7f0000844000-0x4)=0x4, 0x800000000008, 0x5, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00002bf000-0x8)={0x10000, 0x5}, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000bc3000)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) r5 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x104, 0x0, &(0x7f0000185000+0x625)=[@request_death={0x400c630e, 0x2, 0x3}, @decrefs={0x40046307, 0x0}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x50, &(0x7f00000b9000)=[], &(0x7f0000730000)=[0x0, 0x30, 0x68, 0x0, 0x28, 0x78, 0x28, 0x38, 0x38, 0x38]}}, @acquire_done={0x40106309, r4, 0x1}, @acquire_done={0x40106309, r3, 0x1}, @increfs_done={0x40106308, r5, 0x8}, @dead_binder_done={0x40086310, 0x3}, @increfs_done={0x40106308, r4, 0x3}, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x38, 0x10, &(0x7f0000d97000)=[@fda={0x66646185, 0xa, 0x3, 0x19}, @flat={0x776a2a85, 0x100, r4, 0x2}], &(0x7f00002b3000)=[0x78, 0x30]}, 0x0}}], 0x1, 0x0, &(0x7f0000932000-0x1)="61"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00003f8000-0x8)="2e2f66696c653000", 0x0, 0x120) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000a7c000-0x4)=0x0, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000f4b000-0x60)={&(0x7f0000a8c000-0xb)=[0x7fff, 0x80000001, 0x8], 0x3, 0xff, 0x7ff, 0x4, 0x46f, 0x3, {0x2, 0x8, 0xdc, 0x0, 0x5, 0x8923, 0xb7, 0x87de, 0x9, 0x3, 0x10000, 0x4f0b, 0x0, 0xe0, "59e4a4197b1665982c18079b911650982832c6245b5d20c42e7c2025199d45fd"}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f000020a000)=0x0, 0x4) 2017/11/28 18:58:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x7, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109001200000000000000000000ef00000fc200020400080004ff00ffeb0000ff00", 0x28}], 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000a1f000)="2f6465762f7667615f6172626974657200", 0x44a400, 0x0) r2 = inotify_add_watch(r1, &(0x7f00001fb000)="2e2f66696c653000", 0x24000800) inotify_rm_watch(r1, r2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000001000-0xbb)="01526794180f6619d86f07958a0af4bd445aed01db0d7312c2220e486b3eb2c54e2efc6b14c34a8daf3c3ad9f602b1def0b8d987e67a7bcb66c38646b59aaf7aedf8d135a50c2452b564c91588ed9bbe0e9f8935ae8bdc59614dc9485ca4b1231375a05f1559f17310bfad3cdb99fb99d8c6ba2778d08423c5a83ff501fbdfbfad3c8a2218fd774e6090ade12c6ab9941df75628d24feb825c3eee54eb6629397c2d1a7bacae711f42a02e5b8eca797c319f7e2395a8aff1b7e921") ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40086410, &(0x7f00003db000-0x8)={0xac, &(0x7f0000c3e000-0xac)="6aeb19cb431068415955eef6c1fde4c7d15416dbfe4fc087571b74bd85998c12e0595a41fb6fd060c9c9ade656ef8ae5244526cfa0e50279ed8aa9a03c1fe5f22fff78fbaa4bcf7c919dee4b101445c3f004ed6c30062558b446695d9f5556d112c39acba10e1311e55760b8b76ffda990e0674eafadb2986f28d01a165d497e133d17b37d78c05a51855e37db54efa26045d3643a80c90bd451597315f37357d8aa44aa8661cf76ca863fb1"}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000001000)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000000000)=0x80) 2017/11/28 18:58:16 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x1000000010, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) iopl(0xceb2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 200.487972] binder: undelivered transaction 677 2017/11/28 18:58:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000b24000-0x10)=[@in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) bind$ipx(r0, &(0x7f0000086000)={0x4, 0x4, 0x1, "7fecc9c6f012", 0x3, 0x0}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00008a9000)={0xfff, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x6016, 0x7, 0x1, 0x7f, &(0x7f0000c43000-0x2)=@common="726f7365300000000000000000000000", 0xf65, 0x100000001, 0xffffffffffff8001}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) [ 200.527168] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 200.549926] binder: 26301:26310 got reply transaction with no transaction stack [ 200.563418] binder: 26301:26310 transaction failed 29201/-71, size 2-1886661253 line 2670 2017/11/28 18:58:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000f5f000-0x4)=0x2, 0x4) 2017/11/28 18:58:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000589000)="2f6465762f72746300", 0x200800, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000cd3000-0x18)={0x0, 0x2, 0x0, 0x0, 0x3}, &(0x7f00002a2000)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f000086c000-0x6)={r1, 0x970}, &(0x7f0000dfe000+0x704)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000bbb000)={0x0, 0x1f5, 0x1, 0x6}, &(0x7f0000ba9000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00003fa000)={r1, 0x4, 0x30}, &(0x7f00005cd000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00006c4000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008a6000+0xa00)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000d48000-0x50)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7fff, 0x6, 0x0, 0x400, 0xb05248a, 0x8, r2}) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) [ 200.588437] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000088000)=0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000dea000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, r3, 0x0}], 0x0, 0x0, &(0x7f0000455000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bd3000)="2f6465762f6877726e6700", 0x402200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f000075d000)={0x0, 0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f000029a000)={r2, 0xa}) 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000001000)=0x3ff) r0 = syz_open_dev$sg(&(0x7f0000613000-0x9)="2f6465762f73672300", 0x3e5, 0x408000) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000576000-0x4)=0x0, &(0x7f0000edb000-0x4)=0x4) accept4$inet(r0, &(0x7f0000a8c000-0x10)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00001f7000)=0x10, 0x80800) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000072d000)={r0, &(0x7f0000706000)="", &(0x7f0000f1d000-0x1)="00", 0x2}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000582000)={0xd, 0x4, 0x4, 0x81, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000000000/0x11d000)=nil, 0x11d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffffb) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$getflags(r2, 0x405) bind$alg(r2, &(0x7f00003f2000-0x58)={0x26, "736b636970686572000000000000", 0x0, 0x0, "73616c736132302d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00002e3000-0x18)={0x3, 0x5, 0x2000000000000007, 0xb58, 0x4, 0xdff}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f000065e000-0x20)="0735605dc06c18ff000200e3ffffffff79c697d60f06ffdf80d7001000017d00", 0x20) connect(r2, &(0x7f00009a7000)=@generic={0x9, "822718fb2fafc05a08c7f894f92ec2641c636e4a359b3b838f5dfc687c852163c78c5e177fa677cbd4eaf0bb582045d8e85064f5f7b0806723cbf68cd7a3de524ad0db7786bca7052ca725341cca707212cfc8a40cb6216d4787422b511b6ac20d817ff2f62e116ed64e35a2f8ae80eed0a7e2ed217ba391d2873003e52a"}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000011c000)={0x0, 0x2, 0x0}, 0x4) r4 = open(&(0x7f0000375000-0x8)="2e2f66696c653000", 0x2, 0x10) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f00006af000)="000000000000000000000000000000000000000000000000") getsockopt$nfc_llcp(r3, 0x118, 0x7, &(0x7f0000854000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc6) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000b6f000-0xca)="5702655757f718d76ab536979b0e33372ba9ef78a01ab3db46bb281367ce2cb89afe893f68857bf9e503fa275d8dc7d3dd3bc69fbfd37ded0edcc573194f88518be7c6149ba0fbb68aae33d5b629d8cf9ce6f8e491886660eb71a7bd39a3ea3b44c5dbb916f34a3b187dd7e6ed6b78ff7874e27d57d4433e03dcacc15f1010bf1c3a789bcd7bd35dc313297f28a16ad7461e6ef8874d8ddbb606d3075f643425e3beb3c18a3d997d68189673fecf87db383208e795be0596777f18f39e79240e59f2a413fcc8aa9fce5b", 0xca) getsockopt$packet_int(r3, 0x107, 0x15, &(0x7f000011e000-0x4)=0x0, &(0x7f0000fc2000-0x4)=0x4) r5 = gettid() ptrace$peekuser(0x3, r5, 0x5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e79000)={r1, &(0x7f00007dc000)="", &(0x7f0000f37000)="36c0", 0xffffffffffffffff}, 0x20) [ 200.604345] binder: 26301:26310 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 200.604363] binder: 26301:26310 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 200.604373] binder: 26301:26310 got transaction to invalid handle [ 200.604383] binder: 26301:26310 transaction failed 29201/-22, size 0-80 line 2755 [ 200.606483] binder: 26301:26310 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 200.606496] binder: 26301:26310 BC_ACQUIRE_DONE u0000000000000000 no match [ 200.606506] binder: 26301:26310 BC_INCREFS_DONE u0000000000000000 no match [ 200.606516] binder: 26310 RLIMIT_NICE not set [ 200.626242] binder: 26301:26330 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 200.626257] binder: 26301:26330 BC_FREE_BUFFER u0000000000000000 no match [ 200.626273] binder: 26301:26330 got reply transaction with no transaction stack [ 200.626319] binder: 26301:26330 transaction failed 29201/-71, size 0-8 line 2670 [ 200.644658] binder: 26311:26329 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 200.644671] binder: 26311:26329 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 200.644688] binder: 26311:26329 BC_INCREFS_DONE u0000000000000000 no match [ 200.644700] binder: 26329 RLIMIT_NICE not set [ 200.656152] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.727983] binder: 26311:26365 Acquire 1 refcount change on invalid ref 1 ret -22 [ 200.728005] binder: 26311:26365 got transaction to invalid handle [ 200.728041] binder: 26311:26365 transaction failed 29201/-22, size 64-32 line 2755 [ 200.735815] binder: 26311:26329 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 200.735832] binder: 26311:26329 BC_ACQUIRE_DONE u0000000020000000 no match [ 200.735847] binder: 26311:26329 BC_INCREFS_DONE u0000000000000000 node 686 cookie mismatch 0000000000200001 != 0000000000000000 [ 200.738777] binder: 26311:26329 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 200.738804] binder: 26311:26329 got reply transaction with no transaction stack [ 200.738815] binder: 26311:26329 transaction failed 29201/-71, size 0-8 line 2670 [ 200.766234] binder: 26350:26366 got reply transaction with no transaction stack [ 200.766245] binder: 26350:26366 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 200.768571] binder: 26350:26366 got transaction to invalid handle [ 200.768580] binder: 26350:26366 transaction failed 29201/-22, size 0-0 line 2755 [ 200.951895] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 200.961263] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 200.973427] binder: undelivered TRANSACTION_COMPLETE [ 200.978555] binder: undelivered TRANSACTION_ERROR: 29201 2017/11/28 18:58:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000bec000-0x9)="2f6465762f72746300", 0x400, 0x0) setsockopt$llc_int(r3, 0x10c, 0x0, &(0x7f0000e34000-0x4)=0x1ff, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:16 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000d2e000)={0x8, 0x9, 0x6, 0xfffffffffffffffe}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000a95000-0x4)=0x8, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000086b000-0x10)={r0, &(0x7f0000816000-0x52)="d628f21116179376ed6ad64b1ccad41d300cb8b18c1340e63ec903f543a80fea52bf845bd308d37b5c7d8a6705583147c40dbc1520a8647aeb4d4f4d3afb4c640ffc9a5c16a8189dbc1fa930bf7d5f79d27e"}, 0x10) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00001ee000-0xb)="2f6465762f6877726e6700", 0xa0200, 0x0) 2017/11/28 18:58:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000cc5000-0x9)="2f6465762f76637300", 0x40900, 0x0) getsockname$packet(r0, &(0x7f0000fa2000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000fff000-0x4)=0x14) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000f46000-0x8)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) mq_notify(r0, &(0x7f000016d000-0x58)={0x0, 0x12, 0x4, @thr={&(0x7f00002b1000)="feb0b6d20e7ff1fe4ce1694e5098e87a874f0ecf901eb5026469001b755dc6b836bf20614f29fd", &(0x7f0000f12000-0xb1)="7a6e363a054f66b0a03b69ae391a052ab6e04aa163133a52f98021bd48dd62d11c353b984ddb572f0354e235ae0506179e07bc616ca6ce0b09b9d163cca9f99feb5f4536b6010240ecdffeb481d5d38edf81034a8f2ea43e1f98243b9b3fc7fcf7733119891ec92d6a4a9f81cbcc4d9a3eecc69110b8a68cdef8ecc39accebfc5f1ca3abb395b68bdeca4e5efbf52a9b51bc6791f765b75c4132d2dd5267a7347d89fecc09256210be7fecf38be47f183a"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000fe6000)="2f6465762f6b766d00", 0x88000, 0x0) sendto$llc(r0, &(0x7f0000697000-0x9b)="ccebab8f863d66ee78474bbd3830ae13da205e168c224701389d92efa821bf18e2aa68638f31e313510c54088cf22af507e1786fe151c755ba6b954a1a69b76e5ee0a239730b93de54c2668cf8f1e4451d2c02034fd921882393cfb35ff9482ccaf4c032f13dc4bc5d94233948a1f0254d023ed035799d5f3707cad1b86e2b510a307f67860009c79ede4592aee9ee8f9ee90d44646786c482faf4", 0x9b, 0x8011, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x6, 0x2) 2017/11/28 18:58:16 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x2, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x200000000000003, 0x40000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffde, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000583000-0x11)="2f6465762f7667615f6172626974657200", 0x22800, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000f32000)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x1, 0x100000000000000, 0x10000000004, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f000000b000)={0x0, 0x5, &(0x7f0000001000-0xe)=[@in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x7f, @loopback={0x0, 0x1}, 0x80000000}, @in6={0xa, 0x0, 0x8001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x871, r3, 0x0) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$inet6(r4, &(0x7f000000a000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000001000)=0x1c, 0x80000) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f000000d000-0x4)=0x4, 0x4) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x93a000)=nil, 0x93a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) r1 = open(&(0x7f0000f66000-0x8)="2e2f66696c653000", 0x20000, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000300000)={0x100, @tick=0x7, 0x800, {0x400, 0x5}, 0x9, 0x3, 0x100, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_procfs(0x0, &(0x7f0000f57000)="736d61707300") ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00004d5000)=0x40, 0x4) 2017/11/28 18:58:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f00004e3000-0x4)=0x3, 0x4) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) syz_open_dev$sg(&(0x7f00004e8000-0x9)="2f6465762f73672300", 0x5, 0x0) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 200.984049] binder: undelivered TRANSACTION_COMPLETE [ 200.989169] binder: undelivered transaction 690 [ 200.999187] binder: undelivered TRANSACTION_ERROR: 29201 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000854000)="2f6465762f72666b696c6c00", 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000077000-0x4)=0x800, 0x4) r1 = socket(0xf, 0x7, 0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000e53000-0x4)=0x1) [ 201.030518] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bf0000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) timer_create(0x7, &(0x7f0000e5c000)={0x0, 0x40, 0x4, @thr={&(0x7f0000a75000-0xb7)="e381ee5a62550c6a6f59e21820a4f25aecfc5355506f9099d7051c51c623b1135de14c6741398fb2ce53f29b01014fe5d6ca51f896e85211f8620b1aa91f15aff502ffe05c5da560b2f6f98128006903ed6e90893cd0919e97c0c93dce0e5c5f974c438a3eaf618e9fc7656154692b5b72c061e3570daedf6067db79db746fdf1eac2a3df4e698523bb40ecdca84b3669f993355986c9e7ebbd26486115eb37d0b615f58ce422d5abf74092c986bfd039d5f8ffdba008f", &(0x7f00001d1000-0xdf)="7d527a2bdfb8567e954d35122924dbd4a371488b9335e7ff3c816a3ea60d091a6278d5d238c996603ed4ae9d956dfc7e19172727e9a71a61010fce5e815f47cc91384c00aafdc84873adc3c9b0c8b769283d2c7d7331b16317af6880ff8a35477c283d8295b14f937ec7b96aa69b69bcb63ca8879fa1af6c49ee09a16b016dd8236295b9235dafa4e6e5bd70b10e1fcb403d68212f3f3b4f81cfe93feacc15c6fd9a431c5d5d1906313fd70a49ac6855a265ae75c0cc8c62ce4dbe7ef054329ebad9e91cb50d6dcf6da42caf0ca080798550e373d23c73644de22150ad8f12"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000965000-0x4)=0x0) timer_getoverrun(r1) 2017/11/28 18:58:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) timer_create(0x0, &(0x7f00002f2000)={0x0, 0x27, 0x2, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000bb6000-0x4)=0x0) clock_gettime(0x0, &(0x7f0000085000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f000088f000-0x10)={{0x77359400, 0x0}, {r1, r2+30000000}}, 0x0) [ 201.082556] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 201.099843] binder: 26371:26382 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 201.099858] binder: 26371:26382 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/11/28 18:58:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getresgid(&(0x7f0000294000-0x4)=0x0, &(0x7f0000d47000-0x4)=0x0, &(0x7f00002a2000-0x4)=0x0) setgid(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$PIO_CMAP(r2, 0x4b70, &(0x7f00006aa000-0x30)={0x8, 0x1, 0x7fffffff, 0xda6, 0x5, 0xffffffffffffffff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00006e2000)=[], 0x0) syz_open_dev$vcsn(&(0x7f0000745000-0xa)="2f6465762f7663732300", 0x3f, 0x0) munlockall() 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00002e3000-0x8)={0x0, 0x9}, &(0x7f0000c89000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000148000-0x98)={r1, @in={{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x200, 0x9}, &(0x7f00004a1000-0x4)=0x98) sendto$ipx(r0, &(0x7f0000520000)="", 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) [ 201.099876] binder: 26371:26382 BC_INCREFS_DONE u0000000000000000 no match [ 201.099887] binder: 26382 RLIMIT_NICE not set [ 201.161527] binder: 26384:26413 got reply transaction with no transaction stack 2017/11/28 18:58:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00002b7000)={{0xa, 0x0, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1000}, {0xa, 0x0, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, 0x47, [0x2, 0x9, 0x1, 0x6, 0x0, 0x0, 0xb80, 0x1]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00003f4000)=0x0, &(0x7f0000623000)=0x4) syz_open_dev$tun(&(0x7f0000ad4000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x3fffff) [ 201.161538] binder: 26384:26413 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 201.165129] binder: 26384:26413 transaction failed 29189/-22, size 0-0 line 2755 [ 201.165851] binder: 26371:26414 Acquire 1 refcount change on invalid ref 1 ret -22 [ 201.165891] binder: 26371:26414 got transaction to invalid handle [ 201.165900] binder: 26371:26414 transaction failed 29201/-22, size 64-32 line 2755 [ 201.178271] binder: 26371:26414 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 201.178283] binder: 26371:26414 BC_ACQUIRE_DONE u0000000020000000 no match [ 201.178295] binder: 26371:26414 BC_INCREFS_DONE u0000000000000000 node 694 cookie mismatch 0000000000200001 != 0000000000000000 [ 201.179642] binder: 26371:26382 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 201.179706] binder: 26371:26382 got reply transaction with no transaction stack [ 201.179715] binder: 26371:26382 transaction failed 29201/-71, size 0-8 line 2670 [ 201.318165] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 201.331800] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.337434] binder: undelivered TRANSACTION_COMPLETE [ 201.342624] binder: undelivered TRANSACTION_COMPLETE 2017/11/28 18:58:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, r9}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x20}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) 2017/11/28 18:58:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000005b000-0x10)="2f6465762f73657175656e6365723200", 0x80000, 0x0) connect$inet6(r0, &(0x7f0000a7f000-0x1c)={0xa, 0x3, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1800000}, 0x1c) openat(r0, &(0x7f0000425000)="2e2f66696c653000", 0x204000, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000246000)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ce6000)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000027a000-0x4)=0x1) sendmsg(r0, &(0x7f0000dd0000)={&(0x7f0000eb2000+0x2d8)=@llc={0x1a, 0x1f, 0x83, 0x758, 0x1, 0x6, @random="4470f1d8b598", [0x0, 0x0]}, 0x10, &(0x7f0000262000-0x30)=[{&(0x7f0000a34000-0x6b)="b3ce0747bdb31ee00643232ee2c451880bf0a28dad97de76dbc73629052bdc74acc9622baa5b09a5768a9f66867b500231df8ed8f721e91089a1905beb3f432102edb9b857863f6fb3ad8997cb16dc279b738c06b5c38fc1280dc5f1811b12718c5634ed9fb0b46eada456", 0x6b}, {&(0x7f0000f22000-0x27)="499f8f3546e572b298d009ad9517492fb71348d9712edbf221277e1edd5c6c21c7f18fd197f8a2", 0x27}, {&(0x7f0000117000)="715967a504b7f835b9c1051402081687f44c2e53f598446f0c8414afa9755437d884a1", 0x23}, {&(0x7f0000226000)="b49c2b596db43ea526620ba4959c5ceb5c7dd1e2072c9053f050394d", 0x1c}, {&(0x7f000020b000-0x21)="ea9657dd1097f091eb266351e8533f4ff0773dafb8d445609408e8e23a634929", 0x20}, {&(0x7f00007ed000-0x7f)="3275ce307f1c90ebe7766682f8dd7f5abe848a0abab5d58086913dc845f764ad3cbc795b9b77ab05066ebffe4d2a502b19b99a08cc0474941bc1ecb83fc46c3fcd574a6ae1f6da1bf1bf462c515035bd7791572ac9af3c6331719557b4fb228614de647a978359d3111e518b3cdfef4e9cd9f289ddf7567524ae0219a0f3ed", 0x7f}], 0x6, 0x0, 0x0, 0x0}, 0x8001) recvmsg(r0, &(0x7f00008c9000-0x1c)={&(0x7f00007e3000)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x58, &(0x7f0000722000)=[{&(0x7f00002ee000-0xcd)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcd}, {&(0x7f00009b0000)="0000000000000000000000000000000000000000", 0x14}], 0x2, &(0x7f0000c3a000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd0, 0xfffffffffffffffa}, 0x0) 2017/11/28 18:58:16 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1ffffffffffffff9) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) getpeername$netlink(r0, &(0x7f0000532000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000525000)=0xc) 2017/11/28 18:58:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000ab8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008b7000-0x4)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) r4 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000897000-0x10)={0x7f, 0xefab}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 201.347912] binder: undelivered transaction 700 [ 201.358574] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000cf3000)=0x0, 0x4) 2017/11/28 18:58:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) prctl$setfpexc(0xc, 0x20000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000fa4000)={0x2, 0x100000, 0x400, 0xffff, 0x9, 0x1, 0xfffffffffffffffa, 0x8, 0x8, 0x1f}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00009f6000)={0x77359400, 0x0}, 0x8) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) fcntl$F_GET_RW_HINT(r0, 0x40d, &(0x7f0000aff000)=0x0) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000bc1000-0x4)=0x0) r3 = epoll_create(0x9) r4 = syz_open_dev$vcsn(&(0x7f000057e000-0xa)="2f6465762f7663732300", 0x8dda, 0x2080) ptrace$setregset(0x4205, r1, 0x3, &(0x7f000048b000)={&(0x7f0000468000-0x52)="fac366129dbc59a4405e0e5cde78ce2a7eb5c19f77bcbb860ce27bab1962c57b000d529f3e7d32b663ec486bc919cfc0a21a02170c673e00c81ae9d2e9f9a2194c3e713505bfa916eb0387d2e07d6265ee9d", 0x52}) linkat(r3, &(0x7f0000c8d000-0x8)="2e2f66696c653000", r4, &(0x7f00006af000)="2e2f66696c653000", 0x1000) socket$bt_rfcomm(0x1f, 0xb8ad01d7a199466b, 0x3) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000fb4000-0xc)={r3, r0, 0xfff}) [ 201.394368] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 201.416705] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) pselect6(0x40, &(0x7f0000f9e000)={0x0, 0x6, 0xa536, 0x40f, 0x93, 0xb913, 0x78f, 0x2}, &(0x7f0000d4f000)={0xfff, 0x2, 0x4508f568, 0xd04, 0x8, 0xcd, 0x0, 0x8}, &(0x7f0000679000)={0x9, 0x2374, 0x0, 0x3, 0x5, 0x9, 0x1f, 0x100000000}, &(0x7f00008f9000-0x8)={0x0, 0x989680}, &(0x7f000094d000-0x8)={&(0x7f0000c40000-0x8)={0x7fffffff}, 0x8}) r1 = getpgid(0xffffffffffffffff) r2 = dup2(r0, r0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f000045c000-0x4)=0x0) getpgid(r1) pipe(&(0x7f000023a000-0x8)={0x0, 0x0}) accept4$ax25(r3, &(0x7f0000ce7000)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000f51000)=0x10, 0x80800) 2017/11/28 18:58:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0xb, 0x4, &(0x7f00000d9000-0x8)={0x0, 0x0}) pipe(&(0x7f00008d6000)={0x0, 0x0}) renameat2(r0, &(0x7f0000886000)="2e2f66696c653000", r1, &(0x7f0000e80000-0x8)="2e2f66696c653000", 0x5) r2 = socket(0x10, 0x7fe, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) [ 201.437708] binder: 26449:26452 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x7, 0x200000802, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000650000)=0x2000, 0x4) r1 = dup3(r0, r0, 0x80000) syz_open_dev$sndseq(&(0x7f000080e000)="2f6465762f736e642f73657100", 0x0, 0x40800) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000634000-0x1)=0x0) 2017/11/28 18:58:17 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f000032e000-0x50)={{0x8, 0x7ff}, {0xf7940e1, 0x0}, 0x1000, 0x0, 0x8a72, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) r4 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$TIOCCBRK(r4, 0x5428) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000fb9000-0x6)="0c2a6f8f1166", 0x6) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xf08000)=nil, 0xf08000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x1000080802, 0x0) mmap(&(0x7f0000f08000/0x1000)=nil, 0x1000, 0x1000004, 0x30050, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f08000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f08000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f08000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f09000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f09000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f09000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f09000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00005b6000)=0x0) mmap(&(0x7f0000f08000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f08000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f0a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000f09000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000023c000)=0xe8) getgid() socket$inet6_dccp(0xa, 0x6, 0x0) [ 201.452664] binder: 26453:26455 got reply transaction with no transaction stack [ 201.452852] binder: 26453:26455 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 201.453255] binder: 26453:26455 transaction failed 29189/-22, size 0-0 line 2755 2017/11/28 18:58:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) [ 201.456519] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 201.462600] binder: 26453:26462 got reply transaction with no transaction stack [ 201.462611] binder: 26453:26462 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 201.463814] binder: 26453:26462 transaction failed 29189/-22, size 0-0 line 2755 [ 201.466800] binder: 26453:26455 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 201.466860] binder: 26453:26455 BC_FREE_BUFFER u0000000000000000 no match [ 201.466892] binder: 26453:26455 got reply transaction with no transaction stack [ 201.466903] binder: 26453:26455 transaction failed 29201/-71, size 0-8 line 2670 [ 201.489964] binder: 26449:26481 Acquire 1 refcount change on invalid ref 1 ret -22 [ 201.489974] binder: 26449:26481 got transaction to invalid handle [ 201.489984] binder: 26449:26481 transaction failed 29201/-22, size 64-32 line 2755 [ 201.498377] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.498390] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.512247] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.527815] binder: 26449:26481 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 201.527828] binder: 26449:26481 BC_ACQUIRE_DONE u0000000020000000 no match [ 201.527843] binder: 26449:26481 BC_INCREFS_DONE u0000000000000000 node 704 cookie mismatch 0000000000200001 != 0000000000000000 [ 201.529237] binder: 26449:26481 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 201.529249] binder: 26449:26481 BC_FREE_BUFFER u0000000020000000 matched unreturned buffer [ 201.529257] binder: 26449:26481 got reply transaction with no transaction stack [ 201.529265] binder: 26449:26481 transaction failed 29201/-71, size 0-8 line 2670 [ 201.553503] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 201.559524] binder: 26486:26493 got reply transaction with no transaction stack [ 201.559534] binder: 26486:26493 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 201.560276] binder: 26486:26493 transaction failed 29189/-22, size 0-0 line 2755 [ 201.560597] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 201.572085] binder: 26449:26494 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 201.572095] binder: 26449:26494 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 201.572109] binder: 26449:26494 BC_INCREFS_DONE u0000000000000000 no match [ 201.572117] binder: 26494 RLIMIT_NICE not set [ 201.573268] binder: BINDER_SET_CONTEXT_MGR already set [ 201.573282] binder: 26449:26481 ioctl 40046207 0 returned -16 [ 201.586144] binder: 26449:26494 Acquire 1 refcount change on invalid ref 1 ret -22 [ 201.586153] binder: 26449:26494 got transaction to invalid handle [ 201.586163] binder: 26449:26494 transaction failed 29201/-22, size 64-32 line 2755 [ 201.600384] binder_alloc: 26449: binder_alloc_buf, no vma [ 201.600411] binder: 26449:26494 transaction failed 29189/-3, size 0-0 line 2870 [ 201.600747] binder: 26449:26505 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 201.600758] binder: 26449:26505 BC_ACQUIRE_DONE u0000000020000000 no match [ 201.600768] binder: 26449:26505 BC_INCREFS_DONE u0000000000000000 no match [ 201.600829] binder_alloc: 26449: binder_alloc_buf, no vma [ 201.600851] binder: 26449:26505 transaction failed 29189/-3, size 0-0 line 2870 [ 201.604206] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.929950] binder: 26449:26452 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 201.929969] binder: 26449:26452 BC_INCREFS_DONE u0000000000000000 node 704 cookie mismatch 0000000000000002 != 0000000000000000 [ 201.929985] binder: 26452 RLIMIT_NICE not set [ 201.936722] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.936733] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.937143] binder: undelivered TRANSACTION_COMPLETE [ 201.937149] binder: undelivered TRANSACTION_COMPLETE 2017/11/28 18:58:17 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x0) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:17 executing program 7: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00003ba000)={0x0, 0x3, 0x20}, &(0x7f00002bd000)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000ad6000-0x8)={r1, 0xfffffffffffffff9}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x6, 0x9be, 0xff, 0x2}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x802, 0xfffffffffffffffe) ioctl$fiemap(r2, 0xc020660b, &(0x7f000079d000)={0x7, 0x1, 0x1, 0x2fce, 0x3, [{0x5, 0xfffffffffffffffa, 0x10000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0}, {0x0, 0x8, 0x7fff, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0}, {0x3, 0x7f, 0x5, 0x0, 0x0, 0x2486, 0x0, 0x0, 0x0}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000634000)=0x0, 0x4) socket$inet(0x2, 0x7, 0xfffffffffffffffd) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000217000)="2f6465762f72666b696c6c00", 0x40, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000901000-0x1)=0x3) socket$inet_udp(0x2, 0x2, 0x0) r4 = accept4$inet(r2, &(0x7f0000a77000-0x10)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000fcd000-0x4)=0x10, 0x800) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000378000)={0x8, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, 0x7f, 0x1, 0xab, 0x97, &(0x7f00004c8000-0x10)=@generic="26afd1e25707a739be1001327203ef26", 0x7, 0x8, 0xbb2b}) 2017/11/28 18:58:17 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f000034a000-0x4)=0x0) ptrace$setregset(0x4205, r1, 0x7, &(0x7f0000a48000)={&(0x7f0000b19000-0xf9)="1ccc70ba3d7db9e4bed3484973bd3ba5d231048569c56fb1ac2957fd2c862eed5b810d0a2b5f72581546fad292ae4cd215008284fa7f0a51671756f5ad5a2bd89144fe014a16323a5657672c0631b295a5b3874f9a027f669a5efe1bb9354d2630fea502d2aeef2961327f22034e56b8715962eb7d877333cd7e19b498be8675e9bb1b77fefd3e7ade82d67f4f014ddc8a5d9f00ea0d302135a37ee2c56d164ab5e5c772cfac2fa730a3dea7bbff54baa5f4258320ddf5d048a05ecd4f106eb30e14a741772ea2c9b5ad2c7df7eb66b62ad686bf24f3006837d53f79f7ee128c733ca2ac27927c44c95c7619cb428cfa5ebe8eb2832a8fa91c", 0xf9}) r2 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000e37000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f000022d000)=0x8) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r2) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000c20000-0x4)=0x0, &(0x7f000085f000-0x4)=0x4) keyctl$assume_authority(0x10, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r3 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r4 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) r5 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x403c5404, &(0x7f0000630000)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x9}, 0x6, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00004c2000)="2f6465762f73657175656e63657200", 0x10400, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00003a3000-0xc8)="8504444040cee14059ff16ac71b59c54ca91506776b04c47a9bf04cbb530b89429dc5c2456735ded348d64364de5d2a24519e2d039cdb097353d83442fa04476ef95bdb17415de1846fb50fe6597bf4af4e238903c92db0fd3a5e0efdf22801f87ec1fcb50c1f3ed7ef8135e3343ffb873a6905ec311ab3bc39267cb56849b8e4d595d7aaedf71757fb883862ced3a1ba273f3300bce87215e0946f85b4ce68ebda76fe0548ca7a8c802917c164514b805204e9de44558c1fd4376f10fb8fdf57ba54e8af22415be") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f000090e000-0x6)={0xfffffffffffffffb, 0x100000001}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) pipe(&(0x7f0000387000-0x8)={0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) write$tun(r4, &(0x7f0000145000-0x1036)=@hdr={0x3, 0x4, 0xffffffff, 0x80008000000000, 0x6, 0x400, @eth={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0xe8af, @ipx={0xffff, 0x101e, 0x8, 0x0, {@broadcast=0xffffffff, @random="f2a73579e4df", 0x9}, {@random=0x4, @current=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x80}, "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"}}}}}, 0x1036) syz_extract_tcp_res$synack(&(0x7f0000182000)={0x0, 0x0}, 0x1, 0x0) 2017/11/28 18:58:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:17 executing program 0: rename(&(0x7f00003ba000-0x8)="2e2f66696c653000", &(0x7f0000121000)="2e2f66696c653000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000361000)={0x8c, "196182466597dad29e3076802e7c830b584b7b2bb01de3c74a8c92869a612f0347a379b9beb54ff0f8d7fa63861569eee0629f69c3a7a1820b791a6c1d151cc62fbfa0a46672fcc1f437ffadc90b6e286a41f5a475dfd89b16bdcb406c2ae3c16ad67de91488d24702fe7fc402bae5aacbd14f113a55a8f4d9208873eb83ed9bf76e709dfdc073e3ee0ea7e5"}) 2017/11/28 18:58:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000ceb000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x7f, 0x210000) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000c35000-0x2)=0x1, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 201.937155] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.937165] binder: undelivered transaction 711 2017/11/28 18:58:17 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)="2f6465762f73657175656e63657200", 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000084000-0xc)="2f6465762f6175746f667300", 0x400000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000a1e000-0x14)={r0, r1, 0x2, 0x1, r1}, 0x14) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00009f8000-0x8)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000c7000)={@generic="f33d36e7aacb58409ff0f783a576704f", @ifru_addrs={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$TIOCCONS(r1, 0x541d) writev(r0, &(0x7f00000f4000-0x28)=[{&(0x7f0000f47000-0x93)="b231225d2e2b19aba20c22a94040a3c75a31e89f3f13bf4b58b9ebf23db89340b71678e0ea29dd56ee2251cd31ffba102d459a83744eab50a24c37b2e4a59024d9ce4bec494a4caeca1604bbe29aff9c5ea07803871c6091caca7a0a972b76bb0c044b078b3fdb584095abc7daf5957f74430a98f3cf4f440c433c02a849f599e0ea627a163947708372857a34cd60fd2adc40", 0x93}, {&(0x7f00005c9000)="59dbb7ea354fd49c0a896af61248b6a42199c5bdbddf6105449293894ad2e97d7cd623a7902f119261b677c8b3ee5faa77791aab2c5a4c9c3eed666dd83c742ad06f907075172dc958726672f8b38da7ef09a6054bfb26eeefcbb55a844c0b9f81184c460aa3dcb617102ecec40a9f672b58e85014d5213560160379be897490039fac72fcc63c0a44a4a56c1de3ec4d36ff4fe8aab0206a2414486dd1ab994c3f263456a29946e9df76236e044ff7dec5739d6ee5786d85d0707e1410a83ba4", 0xc0}, {&(0x7f0000350000)="6b0ef12e2c2cc989484f88fcd6416014262f9fcab62b42f108b0a7cff676084cc3a3122de6a0d51820914b3fc15a92c35a250687a1feddd674bf8b310fbb114a677e7a39c4fc0a34fed934b9abc276c5c5901e67e58146d3525b192fd3507c4eb79e6d844eabe08e21907a222397079ff8ce21493880136b22049b5327be14d1d42dc95cfff7b867", 0x88}, {&(0x7f0000b15000-0x25)="c834b1d3268aa7d04191f0ae742d1eacc42c122e76d1075191315a929eaaddfe4a02aaf6eb477f31dfee70df0cb6739397e9182fbef31e5ab91dc6fcfaaa95c348c35eff4e0feac2070b5bbbcbfbfa7ca74210f9bbffa2e51aa4ece3245d230999f831db888d2d26f1c6c34abfa14e8ad37734782a9ea72e9fa92ebc4a48c71a95372850c63fd9ce6c3f89d4", 0x8c}, {&(0x7f0000c6d000-0x55)="de4517aba0551f47f7d3f89d2776c25cf0e9acb05bef8168c2de83f2a6ff23e733f45174ea4929853ed690ecf25611e6c51ef33c4b196bc6d1a5aec443eeec80d295696e70c1212b92f1c5f7ad4512ce2ce2781c41", 0x55}], 0x5) [ 202.019674] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:17 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f70746d7800", 0x8000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000-0x85)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000f56000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f000042d000)=0x100000, 0x4) pipe(&(0x7f0000cbc000-0x8)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) [ 202.061547] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 202.089815] binder: 26515:26528 got reply transaction with no transaction stack 2017/11/28 18:58:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) open_by_handle_at(r0, &(0x7f0000039000)={0x93, 0x4, "b4aba85d33a34d4ee7738c91fd645b0ae47f3b8a227621d709c3d7bdaa14c0025a5f187201b99337f92cf3ca0f0946cf5fcf1e5f3f7947885121608b78906c0464cf88fbf16529af2b86707bc11fd8f34b1f06d461bb4ecd7bf02457141b209c4b95b061c9d2d261e73c00fa08b5e059c818f25a9ac21e6e9510b7903b223f605b82a0252e1a67d682dcdf"}, 0x101000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00004a6000-0x10)={&(0x7f00006d5000/0x2000)=nil, 0x2000}) 2017/11/28 18:58:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000fda000)=0x0, 0x80000) io_setup(0xfffffffffffffff9, &(0x7f0000b90000-0x4)=0x0) socketpair(0x7, 0x6, 0x4, &(0x7f00007ea000)={0x0, 0x0}) r6 = syz_open_dev$mouse(&(0x7f00005b2000)="2f6465762f696e7075742f6d6f7573652300", 0x89e0, 0x400000) socketpair(0xb, 0x800, 0x0, &(0x7f000053d000)={0x0, 0x0}) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00005a7000-0x11)="2f6465762f7161745f6164665f63746c00", 0x0, 0x0) r9 = open(&(0x7f0000033000-0x8)="2e2f66696c653000", 0x2000, 0xc8) r10 = syz_open_dev$vcsa(&(0x7f0000798000-0xb)="2f6465762f766373612300", 0x3, 0x412040) r11 = creat(&(0x7f0000400000)="2e2f66696c653000", 0x10d) io_submit(r4, 0x7, &(0x7f0000b4c000-0xd)=[&(0x7f0000ba8000)={0x0, 0x0, 0x0, 0x1, 0xb05e, r2, &(0x7f0000042000-0x80)="cf1e408fb26dbe85910d6b63b714efb2dcefe889fda437868d363df945b412294989da4bc44bf28558873d9149e98bbea58a9c261d3886683c76d521628e2d5c246993596aa9d3bd0d4ae1299f5d222d31652121fe0fcdd15da2936163d84804011c717faf0286190f31621e86ebe1b9f4fda8ce4f14db5f6530f740c5df8bc3", 0x80, 0x81, 0x0, 0x1, r5}, &(0x7f0000eb5000)={0x0, 0x0, 0x0, 0xf, 0x100, r1, &(0x7f0000e96000-0xce)="fe4cb387a8a68878eef83120b210d3d06498fc9636d443737b79d2b84be54d395a15f90d819a6529a80c75d6445c8cf8f45858dcdc7a38b5ed8169959d30d4c9e5ee93324899dd45fb88f4fbdd5a249495f7fec6b31f71c1d5764999f80bbb5340ad944f07c8e117e237dfa4ed67f0890ccb3dbb61bbeba3d98255c4a870792235ebaa80920f6456687257211326e817ee08a7d8d6fb22b1e20db1fb000d831ea83cfd5e116b31317b50282455fe551608f1df368635aea30d309a85423e9fdb86523fc34c9b5e2687a686f79d43", 0xce, 0x8, 0x0, 0x1, r6}, &(0x7f00009a2000)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000e27000)="ad5f10fd1943a08b7990a1333ea4a676a91f59798cded42083a5be3b212dc9b59b07faf23c16654fb644526a927114e43d78a347f4099c0e4d08f04be096912cac1d94952d1ebb68beae12ee4dfe65d80e130ec132e84bd8e9d1cc37ceef881644400e325ee4f1d9f79e337edf0167df7f8327aea08870b4876e95d7924311fad9703c98c0100ae9699be52586b2e7d480e56ea8fc730b90ebebd58dd2f53bf9a5450aabdf7af6a3c67d5b7a052b74e9a1f1da", 0xb3, 0x8, 0x0, 0x0, r7}, &(0x7f0000ff3000-0x40)={0x0, 0x0, 0x0, 0xf, 0xe0df, r3, &(0x7f00009ee000)="d4609eb901aa660631bbee4dedba6f61097fe5a59b4d41e5381bb9fca40083cdb9d3907b4c4c693acd415c20c1349584f48ef2ef1dc2a832cd651636e7e20ab4ceea0935ecd904a26c5dc084f9ad15ca4074ed4ba9c025cfae6f69d615227fee7a1be048b4c761f1379d0a1f6db075acdf77a7bdc81f201c5d4c4609873b6e637d9b232c6c658b3f204640f3b545c46c77777f077d65eaec3d5b174028e142cfa3562a2bf359a4c6ae966e19819041f8157a65a6c3272b02adc04cd76bee47b4f8", 0xc1, 0x7c6f, 0x0, 0x1, r8}, &(0x7f0000813000)={0x0, 0x0, 0x0, 0x8, 0xe68b, r3, &(0x7f0000464000-0xd7)="4ac88d10ddb78c3411467ca549e990772e60eb4a99d8dc527def88df15aa3eeb89d330f90e3d8fd12468e7e9a00cc0c240f441447bc9712ac903156d07a234ac3d7c4a4bba3b3a65cba3fd8fcb36ec89e2cba7305243568995160828069dbda3ada346da3549b418f9c7af6e7d49af5a4d3bc9cfdffe773524e83f41f2936adbaec6e45a950558038691e8a2c5da986e73d33cd6755e70d83a92bc1bd0918ad8b1079a833c0fbe6b89a48bb2f3dc883badd2548d5f63398448e65b1752d99ce46d7f5a9f5407d6ad4ef29c10fccee58f3b60813287c32b", 0xd7, 0x6, 0x0, 0x0, r9}, &(0x7f0000737000)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000d42000-0xbc)="6cfa491f65f7cd86c13255e7636bae08ea4223a56495a3a3498c3b74466c81ed70f8a082f3d7b84a77abbe16558bf9858fc2b25c56b1fc2057895b30d274622b2b3cafd13b003840d6e42fb15023d006bbb5a4f23c27202e0f6904b2e1108a3f7d0e5ac28c0b906813a8e3b52e5ab4470995a69903acff4ebf9689b28ef2827152790e34ef8b9ce35b694f24f84721483a1b6f2af0cf5556ddf1a45f67a5c413965f882e520fd25e1d64c3b1fd0a144ac95b6162465e51cf5242077b", 0xbc, 0x20, 0x0, 0x0, r10}, &(0x7f0000625000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000c92000)="172b5414f226f3f88361af5d712dd2a1df703a71cadfe2661faec558e76ea8096b3d62bbcd752bdb9ea39a31c770208338be3fbb7e23b7391af3b71219db0a397292342e7b9449ba091808b3f51af4e48af9c44927a2e761ed835071897513d4a986c8c550b49bbbe561694cab059f35696b880c79a841e1055eff131f92b898ad16dec06121e5728752c29c30aaa1675b43a040923a60fbdc57f698df5a1b42e02c07e72f15a48a89c3eb1fd705525bb4d39afc862f34fae9fcbbcc3c9dfd46d1ffb3183952ad78caf6d2c4b947a511bd949a1a9f31417fb0696a78503ae0b9cb928236798a0cd7d034265e0fd89206b688c2524d", 0xf5, 0x7, 0x0, 0x1, r11}]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000beb000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000abc000-0x4)=0xe8) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000351000)={"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"}) sendmsg(r3, &(0x7f00009c1000-0x1c)={&(0x7f000011d000)=@ll={0x11, 0x15, r12, 0x1, 0x6, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14, &(0x7f000078a000-0x28)=[{&(0x7f0000f2a000)="2cf89c2972f0e77e656046e2ef09308a32c5df1dff2e70535b7ba0a46883e6eca3925f9e055323c24dedfec5b3ea95ddb1277cc06f76cb7e0bcad7e851e05b031699397c66d3e0eab3a8a1d05fa84d94559a9dcc06d495731d7f4bbe62b047a3f0897ad36d2e625ccd232598a12455b6e612f44fbc2a7da34a7e57198e7895222aacac5dcbb1bbcc842a83f8a618ffe35fe727bdda592b4e4aba39ed498881658578f446c14991ab2f9276b6824662f0c77eb99a47dc5746d9074797b560689041a3b44038e73c17fdc18f2a5b7daadaf4e49d", 0xd3}, {&(0x7f0000813000-0x1)="81", 0x1}, {&(0x7f0000daf000-0x5b)="5da5ec3cd3cde38279c6a192ba35bc013f556cc2976e48715a7d0d4f9a1ab92bd9249c509a953d5869c93f79fd463e7d940364dc76dd13f87b8bd73f940add2568e004c78625fe31233b5fe5e4c6070cf63be85d148d77093e1ef3", 0x5b}, {&(0x7f0000043000)="cfc40f489e5973d96cfbda877c136118dcada45e0d609db2e33b3a305209699cf5b91745106cf6f6724ef49e9a80ccb8a48549d59ce496c19eeb672fd8f22fd46aa5f0ee04f5208f7512809a904b356e5e649c8e2efd676df1af3aa0531658dbbb615fd6ef72bd748aa8332be040aafa372a4839527ab5a206f85291ccefdfb897a7033d50ebd4bf8f441d", 0x8b}, {&(0x7f00006a4000-0x5e)="968decbe9edf0b051607eb7a7ff8d0b075cc944ce3094fd5e9475d9a73635f975fa0dd3fb63e29fddac11279fffa867a67223469d8a816f67b90c1c077f9b38b33142121fb6c655a65aa9d0f6a30aa9d6a67da4494c155458687dedb94a6", 0x5e}], 0x5, &(0x7f0000984000-0x1480)=[{0x7c, 0x0, 0x2, "165dd309b85b0c3f780086358652c3426e3fd00a72ae876e9fce937a95d3e68d1078d7174ef5df0312291d293983949b62d5d6167481bf527212f35c22816c6f4a03244e29c0a7e3af9cb11a1a6ed0e0fbe7666064d0742c5a4dfad17aeb4f4c0798e003620ee81a15927f9a49a0abad"}, {0x90, 0x13d, 0xecf0, "b2fdb668b4d782c52c90f3b621a5c5ca8bf6c067cd8f1e3ee65dab67e8a5840a42eab86f5aac90309a0092927edc30979d8a6ea60e589a902234a723f4c9e40f54e69f8848ea588f507894c062eb4df920bc7b452feff0fdc2277621df89f52fe75459083883621cf4d5f88c140a9e820749008464c3d718379ff371f004850cf450a0fd"}, {0x38, 0x19d, 0x7, "b6894dc79ba0efb22ce7debfda6547cb1750ae18cbdab91268e9f1edeeb52a47706ada52be27075feb"}, {0x108, 0x0, 0x0, "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"}, {0xdc, 0x10f, 0x10001, "e77fa3f17344888fa999c313f8dfb0de9c9f8e052bb0d10ed27276c55de67fe838f968df7615a3b2414649afbbaf6a4acc6915a3d1c345e34403d3f5727afc55384da0753da412be91f4ed6b1c44978382182b8b441cb25a41e226121f4877d7b6c6f1f8d11cdecb2ab4b7522b90fbd946e95e9dc9ab33269df0dd31bf0584f45498d1f0be5c20ffc73f77b8a9592a3dcb6774b30d0ef7edf1c0b01de2d598662964e50eebbdc4daf5392e6493c619639fff48626dd4154de6a56e346a9a01d3ce8d5b1ef585fa3b626ecace521e"}, {0x48, 0x11f, 0x6, "38963ceb34601830eb6c8b87fdd9591ef34185a9f223986d474f5aea0f550e4272d145b44a150133d99bccb6e73957a52e91ad9f43d36d8c984114"}, {0x100c, 0x0, 0xab74, "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"}, {0x104, 0x3a, 0xa748, "050875e39f9eed1d99fbc0623e5f41a4723a061509935da6df1a48156876b385a5f34da38687bf6693024f7ac71ba54e00790870374a54117ebf334276c3d093a9e711e42d05207e02cce3169693c7020f3c4a20ec5933393f4856ecceb12e93a3d865084e5bfa099a12d50fae974520ad8692d149213deda23f4337fa1f3ff94c787ad905ae1f38f97984b9593827ba40fa7981002150590d7ac6036e77e521b12382f60efd91014f39709f701b480055b48805256f7ef714df0a2f3bfc33f47a2404c151ce12394ae4da1ee8da4904626abf75735236a6dec30023f4b3a61263a7729676ad2e5655f169ab88d2e38a26b449bc551ec9"}], 0x1480, 0x1}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 202.100833] binder: 26522:26525 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000c1e000)={0x0, 0x1}, &(0x7f0000079000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f000005f000)={r1, 0x1, 0x30}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f000069a000)=0x10000, 0x4) mkdir(&(0x7f000032f000-0x8)="2e2f66696c653000", 0x7) 2017/11/28 18:58:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b74000-0xa)="2f6465762f6375736500", 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000c5b000)="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") futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 202.100902] binder: 26522:26525 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/11/28 18:58:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f0000b10000)="00", 0x1) getsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f000087b000)=0x0, &(0x7f00002bb000)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TTUNGETFILTER(r3, 0x800854db, &(0x7f000015b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") [ 202.100920] binder: 26522:26525 BC_INCREFS_DONE u0000000000000000 no match [ 202.100932] binder: 26525 RLIMIT_NICE not set [ 202.102576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11054 sclass=netlink_route_socket pig=26541 comm=syz-executor5 [ 202.109155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11054 sclass=netlink_route_socket pig=26541 comm=syz-executor5 [ 202.122611] binder: 26515:26535 transaction failed 29189/-22, size 0-0 line 2755 [ 202.159183] binder: 26522:26546 Acquire 1 refcount change on invalid ref 1 ret -22 [ 202.159194] binder: 26522:26546 got transaction to invalid handle 2017/11/28 18:58:17 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(0xffffffffffffffff, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ffffe1f6d2", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069f000)="2f6465762f73657175656e6365723200", 0x2000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000c2d000-0x4)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000bbd000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000b9e000-0x4)=0xe8) r4 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000ab3000)=0x0) getresgid(&(0x7f0000474000)=0x0, &(0x7f0000da1000-0x4)=0x0, &(0x7f0000dcb000)=0x0) sendmsg$unix(r1, &(0x7f0000b15000-0x1c)={&(0x7f000004e000)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000a59000)=[{&(0x7f0000650000)="fc5d899b318fa161a4c173fa9a875412d17d4a6695dd19267e9220f2180b49cce56dc86e592d4de3122f37ea914c7445cdeb8a9646ee721c54b106e7b7651462e8740304552517b740922524a5989773f65096e1aafe1b961225989504a32f14320378b7b83caef0c9c0bd99cb875fb2c1b75f8fa802c5c3bc8fe918acf3613747ebeacfa9c1a5cbfe0eb2c357f99f8d09240774c35da0a1603b10db776f1790d445cbcaaa6cf1f7c37432f18db8113d751a20c2a7c6686ddbea13e2bd96a90d4587567ac53826877a185d7287668c59d44b89ac3c2b6774570bfa057facbb6197d43765405b508cab087a17df97", 0xee}, {&(0x7f0000cfd000-0xed)="25b98cf8246dcee1df6b013229823d16bccd01cadc66d14dda08556f6c89d7398cdf41aa22624a9ca6b624d45209ca1027361f6149b4bc556358e3082a50adff22a97ff8680946ed12765af2f59601ec497faaa978bdd7a4441e9f0fdfba2813f4fbd9ca8d289036c032373835cfeb0766445de915cdec0de5ebb22ee3c0db61ac5a058a95645551bbfe26924432fd428106cadace87944d942c6cf5bb97605deb883cf89ef7f2d9c1cc9dc8fe5d288446ed0be5f1c2c1c6896ce4737b5f5d40bc30d41c1c7e33f0f41065ab5c5c7bef827df693e35dff4227fedd33f4a3f6e81f4d989a0ec37a12652868c055", 0xed}], 0x2, &(0x7f0000f01000-0x58)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r5, 0x0, r6}], 0x58, 0x80}, 0x8000) r7 = getegid() ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x2) setregid(0x0, r7) [ 202.159204] binder: 26522:26546 transaction failed 29201/-22, size 64-32 line 2755 [ 202.164904] binder: 26522:26546 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 202.164917] binder: 26522:26546 BC_ACQUIRE_DONE u0000000020000000 no match [ 202.164932] binder: 26522:26546 BC_INCREFS_DONE u0000000000000000 node 720 cookie mismatch 0000000000200001 != 0000000000000000 [ 202.179993] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 202.188799] binder: 26522:26546 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 202.188809] binder: 26522:26546 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 202.188820] binder: 26522:26546 BC_INCREFS_DONE u0000000000000000 no match [ 202.188828] binder: 26546 RLIMIT_NICE not set [ 202.223132] binder: undelivered TRANSACTION_COMPLETE [ 202.223139] binder: undelivered TRANSACTION_COMPLETE 2017/11/28 18:58:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f00001a3000)={0x2, 0x20001000, 0x4000, 0xe2ed, 0x400, 0xb14, 0x7, 0x1, 0x9, 0x8eb}, 0x10) clock_gettime(0x6, &(0x7f000028e000-0x8)={0x0, 0x0}) select(0x40, &(0x7f0000180000)={0x20, 0xcae, 0x6, 0xfff, 0xfff, 0x7f, 0x9, 0x8}, &(0x7f0000caf000)={0x5, 0x2269, 0x3ff, 0xb4, 0x6, 0x7, 0x800, 0x55ae}, &(0x7f0000201000)={0x4, 0xfffffffffffff279, 0x7, 0xcf, 0x7, 0x6, 0x3f, 0x0}, &(0x7f0000549000)={r0, 0x2710}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={r1, 0x4}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:18 executing program 7: r0 = memfd_create(&(0x7f000098f000-0x9)="76626f786e65743100", 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x100}, &(0x7f000069b000)=0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1, 0x8, 0x20}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000ab9000)=0xfffffffffffffffc, 0x4) 2017/11/28 18:58:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00009ff000-0x30)={0x800, 0x0, &(0x7f00000c4000)="553856c03ad4a3ab24297cc3cd80c954de2590d84910b72ab3dbf566a5428b7d1eed7f760de56fd7018b4b9c6a82ab17135bee631f3fbc6cd39479cc760c8af8a59cfe27946a548ecfaa03cb0d0ed198b41d884d864c6f0bbf15ac706660566c20373bfe80d7515fe306f8185864f8caed6b32703f8321d48f2b5743196cdecb5ec7f5ad59c9a7d57cf78f83d402a9658be2160a733c38db965f8a516167c6c11c08dcd27e3edc5a60e0a8bebce259b029e4d07232dbbdf25f6ecf456876dd9fc8ae041ff27d607a7e0383d50cde9f44f1a5abc5c035806ea5bb2b334e0a74f5207503d956554e03a85d103c829450eca8cdceaeb5dc8f58c3b3ea2bd76be49b90ec954d89dab419d62c527caf1d6dca9e781fae123b91eb45c823ccb9a607bf63b4a671f5dd17a37fa9f320bbb934b1711771e1256a579ca9a36bbbd7dc4d8afa7a7a9d2877272b14dd00b72e32d90023813aa2c2c631c4af53e3c20ac98df54fee377b0499654b16f9873fa494dceab5da41530634cd6c53c790f1dca28b9ab14e59b6c0b00d97e864d4dd0cdfbc92671aad5617a575ad74b161fa0be07b52a76ce7750a875ccb942f0da03022c9e7a68f8f2e951b6e86fbc73ceb5ffd75941124c02868cbba170ea14efb4c4fa5f3445337c80b115465ccdab757700965cf78ec8ea8818d721e6beb8c2be66743c7a3993ffaab1b0f95a8ba1ba4d79d34822d287d38192e2dc9387d7e7dae0de56fa768bcca73e8e98cacdde3db3e026ab20dbe73419820581fc56944ce234a03cac631f6b1f69d24126d5ddbb91d645a863b9d943d2930df1ba21929b9ab6bee6d71b38de83e8ae00a68a276a75513212e387a417577657156ee2b16b042d41d6b1ae0c7808bbcc319270b5f2d812f12fad735504f39760ccef89e64fb7487ba9ff6a0b278f67c1de02c61304bea96d8622f664142c16b344458787c6e08dc79306f2fb96ec17a921be141a07301868ee91fe18d1006e77a518df3df954f57c762ff4494ffab8a9f494365e568682b1b04bb39009192b3e6d15d5b5d8c59196ff0b18ef702e5ba68097df53dee92ad2860cf7f6cbe3888756f765078d787314e5d66fd9ab014d6208c3807c2e7f38badae1dac88ae47d462688f2fb3efbade465c57b9833476198efedaf09d92d89740243fc90b4d0744a0cd707d9a5e4e6e5003530a4b4a19b988a3ce8c44002490067e59060117c2f2a4b737bb1e25c4c2ddbfa7582953b00951b71f11f8d0574a93801fc052bc5da35f43c31b2b1be6b6e08311491776b99012b672635a3bd8c212b419713edaef1da731bd2c195e7ec496fbe369080308f330e3973b3a873796d1c91fa6aabe0727c6a81569804408dd7044c461359445d354cd191de5bc37dbf179b158fa55b0b82287ad1843f14825be831e6990173707605a82be56686dd46c165d990402894186fc398b956d105c95ceef5eae01d9a60f7136b23cd7d5fcc55f812625037bceee2e2e86030f36997ff101557494c09b3a2f42478723f81fadbf49e56105c1e837faea671c84fa1c5ee4bd7fc3b66816da48878b2171fb82f07e2bd14264784783c0204d09f20e0affaee716d075ffac7e50951a965d282f74eb7d1b99c1740928162064e01b1b5a1459b21672485982b5cca09ed4497f413c1b21a68640a699abb5cf9b1d05a7c62f8368a7597c65d02710d433d46e729ff2cf7525de7f697a4a1e0faeeb7d5b5401ecaae627367acb41edb3759601731ad8487a15b06e0a51a24c6c7d185a44f17ae81a63d1f0d1cd994ee9dd632d882088ede95fab51826b4cb8d2ff2d5f45e705db451608c67d1b5d673ed9fe96f39f45b4b07d6fb4e953f89c6516478b2f9d5ec5a31626d18e1b18329413ef6b3a529d3b2a01e60747a66d978b9fd4e03d680f5f4e41e746bf29f1b5ef2755af31227c2d642a3dfb3fde8550990063a8a249e0567bc682563b99d3bbc8e234fd7ebbb81c5b6fc5174961150e804909503b6f8ccca4014f0fdb02070307bef7b9b25b7f5423bd637a8dfa4f264a3bfc22b7cf4490266cf0a0fa2f3c7941149c4195ae45898a6abe1c6e09885ecbf25998304f5e9a279f798f88ba316930087f42c7efd521adfca385d9da0e0408df907db7549eea91918b6afe1d0814b0c6b9f11c56a69459583ec10d79ff567b023ce1f11e1b6b57f263b444b34fe4f30d8765f517b02482f0d510ed43c472d0be1d077464e30a16e611b4883d2111b94ad27f662017101e9d6bd789b0a2c64ad7053791f9d6bca4ba181d0fa701ef56e10841b5a97e6df95244718745262a408594660bc6f16c8c122c17a24e4fbc02d5d839a568a9627da1cafd252ac70142cbf26b97feadb971d00385b383915756076c0270e92ed6b2050610f812fcf16a2343f1d5113f3dd3e674cc906743d7b26bacf8a5a84d706168d168e77def5dc74b07aa4c955d2ca05adfbec8ed5a1d78625081c8a53adbb5c160ed98b1d152cd11239a9ddc4988381f44fd078fa7aea2dc280fbef470bf9018d23203a9d2d7b0cdcb60b74cda0e3cb3d4a3913589d38a4f71af80e4ee91913671cd2f8ed25f92df8ae3baf7035a0baa2650db2f3078e866c091224dad5d1fc6541c062b8a8e8fd2a51770e1093173ef8e3da422ff8ba4ad048d5719e6bf1c500b9b895b60d4ef83404d28ba85c4830118c28ce5ac64043f1c8805517ba2e9fbc7156b9aeab4d24a6107d6032e4c78a47259183e5c5c1531372cbe3439d7bb58d74b2b201b1cf72ae7aa6a80497c18994cc63aeac8ec19c0d27513523fa36711e2b3aa16b7dcd716144f4285fec937e3bf0c01bb38b840fc49866604b1b89c65722920defcda6682b38cf05572dfdc04d13bf0a0b4d811c4cad6f61d306c459c99d1f757b5f1ea9fffe0df0384962c80b8cc61402314ec4c0f610ffcd66479fbcf43ad1a9455c6e3e8a2fedf7e15300ac5fa8860f70267122251d28f19b057ae30ff2ae933395778e378e5c0373fefab3153390e403a5449c3c16d1676638ab2b09cb6a3797a8ee18ff5ab73853db17f044f4fd83f54e177e93564d9df08b45912060650577d23214690ede85b9288fbb04f538daca3ffa5c9c828ed144ceae47bfc09bb04a6331a69c82594f0de91d375e6f32d1071fdff6c9d54e9ed42cf5d0bd40b60150972ae26dd3c04becbb694288401fad2bab2af4fb9b8ebe77c6b01e1e537c9bc7a843268e08513bd2388a0eb25adb13552e1d38523761f2c24e4e314c94eed921ffc54b59fe7365a0353ba682a393a2e675d9798a4882d73e6fffde9a04a519deb60f3f75bf66c2976be58b9983007370db81665b14739bb33d791f75eac59b3c5138aacc02d1c1851d09bac378ed198d6157f88a26c5580c757c2dd34fd0be6f00820a97b0e4825b2165f5642d1407703c9ff900fd99a051674234d33de2138d2336b5aa32d6734eab2daa9ed3536c93fe3e3b369de9b467b59dd18b67bdd1b3b76a4bc3aa9311f873b7921201f0947a85337a7c0e20c540c2e9d6fff41530100f53d4c9558d9ad7144e71f97b9b8c519488e372b2fb8a6a8c77da9931fecafa50513b726bde6386021dd5bfa239326d2acbb5f2615bfeb787b5feb1645c8cd2d7dc97ef0a4bf9b45be31a94eb417d9abdfcfc9c8f226dac215366e1341f117057d72e7db2a87f7abcabe0aeb5b8209dee8a97a5e5fa824c6dc3082d9762ce19e906ca35606ba189838a8cde8fe6032c489de60a3dd5e895eed696da38f43c38376146067a5f1ecac48108e3f752120d23c1782b978e4ac9eade6a2035c66963de6b1a18eef58af36203a1ed594d5249fe456bd2d3346178b99e2d9d4d7696f20b8c75b982915da36278a3051c4bb186f843a662a511f94a93aec15d8c49883d68ae22d5334674a058c33edbed781a7e277de73b06f37e161ca56ee25e81135e83b8f1f24148a4a2ea377cdfd21cb90ae4acedbdf13d13323449cda65b6273959ed158485bb069d7d4cf146de445639cb2cea67d2da91016aa2c905b5afc9204b5906ad05cdb0f290563dbb700e13abc9b5cd2c9fc6110362adaca341b518fd8d10508aff721dccac66c7562f8bac7fc372158f197533dffd7b4d721cd5907f2e193f7e48d93762dd185694a7ddbdab201a0fb9e89519d8eba932b0d990130d80c634737925a15b6af7667fd20a94734e544c62e9c8aa8c87c71898ca2e489b372a9116eb494b97e827451a67a6703f85a04069c8eea9dd32f804be2e5daaab208f2eb5747276d1ab08902ee7193b9b4dd51af207ed397dbe29d967cbe01054db4dd181a018a322943b7344245cb15119cceef9fdbf5b06a30cbb2d48db3c0706530709851133596f9c66bdf96efdd08c9194d666910f13cc1abcf0873245562e097980bfac87024652c161bf6e75e269da9031dcbd7358b90e00d1da5cbdb8b1dc6cf3e986ff72243f08a7c7d4dbeaa94970769fbe5d96480c52de9cf758d9fd8df10633d811789d2e249b2634af3b5ffee208706eb4fa7713866ad598f4c3299201eae36f8cc5a2aab41d0c5b99f1f5294192d3214967379b7940f5feec3203baf7a269a4e042c42f9500972a600c25168b34f349d3a9855294e9a9ab69f3b69a00a80fb9db5626428744344f7e7de83812e72e591e157f91aa938a4daf7982fe77a9e15f9d6f9ef847affba104af38310affb5e7302ebb7615481c8dccd209e1278722129a912d2d3c0df203f3ab8c41b9325aa4a5dc935bb23f8192f1d35a6fbee80acedc14a0ff087bc809da27ce0c7c2aeff68de9cc9c40e74ad0a45e1df9f9b5466708a2fc31dbfdf2a6ec6c037fb84c07bbb922b6c11a6d5dee0e34d7bfcdf532a65bdae239523122f2302406e7f4c3e0c5da7b1a6734d94bf054fb9565abe8d521604450b4cef778e944be78f7bea0b1f573ee724f4ef6d22458260145b44004f0eef6cefff1a8cba27eb0a5194a11179c83ddbd11a2b1d627aa8f266494d30e2babb0c2dce63cc76757890dc554e93e2991c60058f360d4475cfe441dab8b0ccfb4890de6107c9e1ec0fdcdce6160718ceb2537b79111dd433c3cdac948f548007e185601907dee8ccd51724a4bef76ccf0cc8a31ec6a6b9daf133bbbf72ea4d17650e5238a9958bd2e3ea97562c5d6444b9a3e7a66d35bd85db575a08e1d429219212540e16443fb21bd2a0cf2f774a16dabaeb85f23d82faef3c00b893d5d3a1529bf1d7e13dc5bbf9bc56c95348741b928f59f2ada6467495f2d8067b36f68c721cedcc8f448c1d2bed5259788a6497a1a535086a95336a2f59ae5eaa827b067982e7bf615cbae0f026f72bc54ff6286360221de8d9f247c7b3d961f7ee92815210ce2adc9e585630a8e086c0441c22622c44946bcd4bb2a811c0eaf3858caee3471b47500bc6d38512885af7ead5637ec258627067b8b51c4b7c571ca0451ceaf55ccb8283c3e50615265fe3c3f1caa046aebea3a29578083ec73f25aa95123160f117520baea1b984b4da22587c3e6f6e28fb714e70736b03d201e432474b4ea93852962745f8896e77f9f430472c1d5983a88fdf20fce2b9f5293150a0e329ad8ebc65227ccda3a347a3de3e20316a984715c00a5cd2e1a0a8455a00263565927fd1af3e33e8f176baaab56aafd5193bd0fc312c4ec1ff0b7cfdadeefaeec764c2e4e79503fa3a5755331f264e1d31e5a48e85304d9e2e7c13d67eefa5b3d696f55520080d0488362315a0043c4a4308840bcf9b93a80f97039f14225a20676d79340bfa5187aa278dbaf602dccb96083", &(0x7f00004b2000-0x15)="943a97dcc6b46e9b4c06eb162ff2a8f93bf7dd02d6", 0x1000, 0x15, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000cdd000)={0x0, 0x0}, 0x800) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000c96000)=0x100, 0x4) ioctl$KVM_SMI(r2, 0xaeb7) r4 = creat(&(0x7f0000b7f000-0x8)="2e2f66696c653000", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000deb000)=[@in6={0xa, 0x3, 0x20, @loopback={0x0, 0x1}, 0x9}, @in6={0xa, 0x1, 0x2, @loopback={0x0, 0x1}, 0xffffffffffffffff}, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @rand_addr=0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x78) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:18 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00006c3000-0x11)="2f6465762f7161745f6164665f63746c00", 0x600102, 0x0) gettid() r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f00009cb000)={0x0}, 0x8, 0x27fd) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00004b8000)="205d9e9e5af498143857b61446c7d6699059e9d6c868ae71fb2ef3ec63fded94a0c2fb31e6df58780c817f6e3abc0911747411ba085dbc21d199ab88a404c30178def1353562153b422444b77d97f0c266ca077508a189abcd2f0f5eeca7") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000419000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000db5000)="2e2f66696c653000", 0x301000, 0x160) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0xfffffffffffffffe, 0x9) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000ded000)={0x7ff, {{0xa, 0x3, 0xffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x455}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback=0x7f000001, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0}, {{@in=@rand_addr=0x2, 0x0, 0x0}, 0x0, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}}, 0xe8) membarrier(0x1, 0x0) sendto$inet(r5, &(0x7f0000c62000-0x1)="", 0x0, 0x0, &(0x7f0000c24000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={@common="6e723000000000000000000000000000", @ifru_settings={0x1, 0x7, @raw_hdlc=&(0x7f0000002000-0x4)={0xfa4, 0x3}}}) mmap(&(0x7f0000000000/0xc1e000)=nil, 0xc1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000c1e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c1e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c1f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x101, &(0x7f0000c20000-0x4)=0x0) 2017/11/28 18:58:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) mbind(&(0x7f0000fe6000/0x3000)=nil, 0x3000, 0x3, &(0x7f00002ef000)=0x1, 0xfffffffffffffff8, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 202.223152] binder: undelivered transaction 725 [ 202.400183] binder: 26515:26528 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 202.420352] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000799000-0x8)="2e2f66696c653000", 0x86) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000395000-0x8)={0xffff, 0x7f}) writev(r0, &(0x7f0000081000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000ff8000)={@common="626f6e64300000000000000000000000", @ifru_flags=0x2400}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) prctl$void(0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 202.460454] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:18 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000d13000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00007fa000-0x9)="2f6465762f73672300", 0x9, 0x80000) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000035000-0x2)=0x4, &(0x7f00000f0000-0x4)=0x2) socket$netlink(0x10, 0x3, 0x0) 2017/11/28 18:58:18 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000434000-0xa)="2f6465762f6375736500", 0x111001, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000217000)=0x1, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) 2017/11/28 18:58:18 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="", 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000fba000-0xc)="2f6465762f6175746f667300", 0x400, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000880000-0x8c)={0x0, @in6={{0xa, 0x0, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f000093a000)=0x8c) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000055000-0x14)={r4, 0x5, 0x1, 0x7, 0x3, 0xff}, 0x14) ioctl$KVM_SMI(r2, 0xaeb7) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000723000)="2f6465762f70746d7800", 0x100, 0x0) ioctl$TIOCMBIS(r5, 0x5417, &(0x7f0000adc000-0x4)=0x9) ftruncate(r5, 0x100000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = dup3(r5, r5, 0x80000) ioctl$DRM_IOCTL_AGP_INFO(r6, 0x80206433, &(0x7f0000a65000-0xb0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 202.532638] binder: 26603:26627 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 202.532652] binder: 26603:26627 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/11/28 18:58:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x13, 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f00005ce000)="2f6465762f696e7075742f6d6f7573652300", 0xadd, 0x48080) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000416000)=0x0, &(0x7f00004cd000-0x2)=0x4) clock_gettime(0x0, &(0x7f0000a34000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000880000)={0x9, 0xfb, 0x5, {r2, r3+30000000}, 0x4, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) faccessat(r1, &(0x7f0000501000-0x8)="2e2f66696c653000", 0x2, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) sendmsg$nfc_llcp(r1, &(0x7f000060f000-0x1c)={&(0x7f00000e0000)={0x27, 0x1000, 0xb, 0x6, 0x8, 0x15, "57d2d2f0daae42424afaf7dc906178207830051edb5c1a5ab00a7b9cabbe78d16785f412971c4f1a0c3bb2a03adb04fff9e2ccd5a3f665d4c6adb988fae478", 0x3}, 0x58, &(0x7f00005d1000)=[{&(0x7f0000aeb000-0x51)="03ed1c684dd2d1f9e12d698d3fd86a965a3a83dee4ced1ee88b08d11e9a475fd7fcc38f866dc82c6e24119e5ab824681219a9fd3da59a2a7e5365e9130811231e6d90c5174bfdbf338d51dcab5dac3785c", 0x51}, {&(0x7f000052d000)="3f27293ad816fb210a187697a6fb813470f75f0479ab4a1ecdd38460b2216b1933d2e4ac8e59441de6ff01ea19b207", 0x2f}, {&(0x7f00005ef000)="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", 0x1000}, {&(0x7f00003f9000-0xea)="e78abde867e870df3978d8f3141bb8c7e0f10387fedf688d7d71759ed0fe77aba219f1dddcce28e4c550767e2f554a6698001124a857f13eed4457bfcb9673088c953a64d59e22fbc33f6ae1c810e542729aa387baff8f2769e5f102eae96d745955913c55d00bd755976845b2fb71b59d72f2ee8fc16b2d78ee4cae8fbba148afb5c561c51ddc87766254e91ef6cca87c924e9c25ef8933e0f2f8c690e10cf7f5132d374e100b0c4c0b8e1895cf1c4dfd46b8a9a2d507400c1235203595972f3c493eb2cb1d324e6cd12a2049e17cf82cb198b0b223ae158851331b507dab5473ddc47912ad4a37d486", 0xea}], 0x4, &(0x7f0000e1f000)={0x10c, 0x185, 0x9, "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"}, 0x10c, 0x14}, 0x4000054) r4 = syz_open_dev$vcsa(&(0x7f0000980000)="2f6465762f766373612300", 0x7, 0x80000) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00002ee000)=0x0) renameat(r4, &(0x7f0000970000-0x8)="2e2f66696c653000", r4, &(0x7f00005ac000)="2e2f66696c653000") ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000d85000)={{0x8, 0x3e}, {0x0, 0x630d}, 0x9, 0x2, 0x5, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) rmdir(&(0x7f0000824000-0x8)="2e2f66696c653000") 2017/11/28 18:58:18 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000bb3000-0xb)="2f6465762f766373612300", 0x200000800000001c, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00003f5000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00005db000-0x4)=0x8db5, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000198000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x1, 0xffffffffffffffff) ioctl$TIOCSBRK(r2, 0x5427) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ddc000)="2f6465762f6175746f667300", 0x309402, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000b51000)={0x0, 0x0}) ioctl$KVM_S390_INTERRUPT(r3, 0x4010ae94, &(0x7f0000870000)={0x3, 0x1633, 0x5}) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f00004bd000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") 2017/11/28 18:58:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0xe, 0x8, &(0x7f0000b21000)={0x0, 0x0}) sendto$ipx(r0, &(0x7f0000f06000-0x5b)="d3ede78d74d18f32e87324158f4bdcc4c86d0e86353aabb43447e67f796da6f6443b1faadba688db29659901a216f03556894260fea303abdceb9f1385091137ab22878d291383f6ea0c1fb3d897c45eb64e66c80833ee229590f0", 0x5b, 0x4000000, &(0x7f0000e83000-0x10)={0x4, 0x9, 0x100000001, "3b45ae9eb3cf", 0x2, 0x0}, 0x10) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 202.532665] binder: 26603:26627 BC_INCREFS_DONE u0000000000000000 no match 2017/11/28 18:58:18 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r2) keyctl$assume_authority(0x10, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r3 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r4 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40d, &(0x7f0000c91000-0x8)=0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000f8a000)=0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x38, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @clear_death={0x400c630f, 0x2, 0x4}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 202.532675] binder: 26627 RLIMIT_NICE not set [ 202.613555] binder: 26603:26645 Acquire 1 refcount change on invalid ref 1 ret -22 [ 202.613568] binder: 26603:26645 got transaction to invalid handle [ 202.613578] binder: 26603:26645 transaction failed 29201/-22, size 64-32 line 2755 2017/11/28 18:58:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000fd5000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00007ee000-0x4)=0xa7) 2017/11/28 18:58:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000c93000)="2f6465762f76637300", 0x0, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000265000-0xe)="0000000000000000000000000000", &(0x7f0000a1a000)=0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00006ba000-0x4)=0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000f1a000)={0x10002, 0x10000, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000ba7000)={0x5, &(0x7f0000935000-0x28)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000872000)={r3, 0x1}) 2017/11/28 18:58:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(r2, r1) ioctl$TCGETA(r3, 0x5405, &(0x7f0000d01000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000fab000)="2f6465762f6e65742f74756e00", 0x0, 0x1) 2017/11/28 18:58:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000589000-0x4)=0x1, 0x4) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0xfffffffffffffffe, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000e9000-0x11)="2f6465762f7667615f6172626974657200", 0x40000, 0x0) getsockname$netlink(r1, &(0x7f00000c7000)={0x0, 0x0, 0x0, 0x0}, &(0x7f000023d000-0x4)=0xc) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 202.752822] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 202.765490] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 202.769737] binder: undelivered TRANSACTION_COMPLETE [ 202.790729] binder: 26671:26675 got reply transaction with no transaction stack 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000063c000)="2f6465762f72666b696c6c00", 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00009ab000-0xb8)={0x0, 0x4, 0x1, 0x9, 0x0, 0x10000, 0x1, 0x49, {0x0, @in6={{0xa, 0x1, 0xfff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x4, 0x3ff, 0xd3c4, 0x1}}, &(0x7f000049f000)=0xb8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000eaf000)={r1, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffb, 0xfffffffffffffc00}, 0x98) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000ab0000-0x2)=0x5354a292, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000361000)="2f6465762f73657175656e63657200", 0x4000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00006e0000)={r1, 0x8}, 0x6) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000bcd000)="") writev(r2, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000359000+0x69c)=0x0, 0x4) [ 202.811935] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 202.823203] binder: 26671:26678 transaction failed 29189/-22, size 0-0 line 2755 2017/11/28 18:58:18 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa0800000004053900", 0x13) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) clock_gettime(0x0, &(0x7f0000d83000-0x8)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000c26000)={{r0, r1+10000000}, {0x77359400, 0x0}}, &(0x7f0000fcf000)={{0x0, 0x0}, {0x0, 0x0}}) futex(&(0x7f0000247000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, r2}, &(0x7f0000048000)=0x8000000000000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f000001b000)="2f6465762f76637300", 0x242200, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc010643a, &(0x7f0000959000)={0x40000000, 0x1000, 0x2b}) 2017/11/28 18:58:18 executing program 7: mmap(&(0x7f0000000000/0xf63000)=nil, 0xf63000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000080006, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000624000)=0x9ef5, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000f64000-0xc)={@local={0x0, 0x0, 0x0, 0x0}, @broadcast=0x0, 0x0}, &(0x7f0000f63000)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2=0xe0000002, @multicast1=0xe0000001, r2}, 0xc) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f65000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000214000/0x2000)=nil, 0x2000, 0x40001, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00007a5000-0xf)="2f6465762f73657175656e63657200", 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000001000-0x4)=0x0, &(0x7f00004eb000)=0x4) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000f69000-0xc)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000f66000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f68000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6a000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000cc9000)="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", 0x1002) mmap(&(0x7f0000f65000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f000034d000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x5, [@broadcast=0xffffffff, @rand_addr=0x200, @empty=0x0, @empty=0x0, @remote={0xac, 0x14, 0x0, 0xbb}]}, 0x24) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000f6a000)={@multicast2=0xe0000002, @rand_addr=0x4, @broadcast=0xffffffff}, 0xc) mmap(&(0x7f0000f65000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f65000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 202.826306] binder: 26682:26683 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 202.826318] binder: 26682:26683 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 202.826335] binder: 26682:26683 BC_INCREFS_DONE u0000000000000000 no match [ 202.826345] binder: 26683 RLIMIT_NICE not set 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000cb8000-0x8)={0x0, 0x0}, 0x80800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x28) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x1, 0xfffffffffffffffc}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00009d4000)="2f6465762f72746300", 0x10000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f000051d000-0xe0)={0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x1b, 0x1b, 0x14, "1c0a6f2c6498502fa59b4f368b8523f2bcf4844af8adb16ea099399119fcf046d554d8db84563dcc60ab98b7b15c9c6617dc11499c90c0d05eb1f63286f6fe79", "66ddeee1739243238f0499d90192dede7f2ca9f77552850daa30238d13f5f8e19b20ae218fc7ba9ea382d064f9f0d97db125fae6b1467917098816d78dd399ed", "55e8b8e4b4be30c4ced94fd91bd94213422b20545f41a47acb259f60a7d7abe8", [0x7fff, 0x8]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000357000)=0x9, 0x4) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000693000)={0x10000, 0x4, 0x4, 0x8}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) signalfd(r4, &(0x7f0000675000-0x8)={0x18}, 0x8) [ 202.903291] binder: 26682:26707 Acquire 1 refcount change on invalid ref 1 ret -22 [ 202.903302] binder: 26682:26707 got transaction to invalid handle 2017/11/28 18:58:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r6, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r7, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r8}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, 0x0, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 202.903313] binder: 26682:26707 transaction failed 29201/-22, size 64-32 line 2755 [ 202.924377] binder: 26682:26707 BC_DEAD_BINDER_DONE 0000000000000001 not found 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0x2}, &(0x7f0000fdc000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000e11000)={0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 202.924390] binder: 26682:26707 BC_ACQUIRE_DONE u0000000020000000 no match [ 202.924404] binder: 26682:26707 BC_INCREFS_DONE u0000000000000000 node 731 cookie mismatch 0000000000200001 != 0000000000000000 [ 202.931230] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 202.940232] binder: 26682:26707 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 202.940243] binder: 26682:26707 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 202.940256] binder: 26682:26707 BC_INCREFS_DONE u0000000000000000 no match [ 202.940264] binder: 26707 RLIMIT_NICE not set [ 202.961310] binder: BINDER_SET_CONTEXT_MGR already set [ 202.961350] binder: 26682:26683 ioctl 40046207 0 returned -16 [ 202.964353] binder: 26682:26716 Acquire 1 refcount change on invalid ref 1 ret -22 [ 202.964363] binder: 26682:26716 got transaction to invalid handle [ 202.964373] binder: 26682:26716 transaction failed 29201/-22, size 64-32 line 2755 [ 202.972462] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.974172] binder: undelivered TRANSACTION_COMPLETE [ 203.028349] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 203.035292] binder: 26742:26744 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 203.035307] binder: 26742:26744 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 203.035323] binder: 26742:26744 BC_INCREFS_DONE u0000000000000000 no match [ 203.035334] binder: 26744 RLIMIT_NICE not set [ 203.098271] binder: 26742:26761 Acquire 1 refcount change on invalid ref 1 ret -22 [ 203.098291] binder: 26742:26761 got transaction to invalid handle [ 203.098313] binder: 26742:26761 transaction failed 29201/-22, size 64-32 line 2755 [ 203.101513] binder: 26742:26761 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 203.101527] binder: 26742:26761 BC_ACQUIRE_DONE u0000000000000000 node 736 cookie mismatch 0000000000000004 != 0000000000000000 2017/11/28 18:58:18 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r1) r2 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r2) keyctl$assume_authority(0x10, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r3 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00007ab000)={0x0}, &(0x7f00005ce000)=0x4) r4 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) wait4(0x0, &(0x7f00008ce000)=0x0, 0x80000000, &(0x7f000015a000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f66000-0xf)="2f6465762f73657175656e63657200", 0x200, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000d24000)={0x2, 0x9}) nanosleep(&(0x7f00000fe000)={0x0, 0x989680}, &(0x7f0000dd8000)={0x0, 0x0}) pselect6(0x40, &(0x7f0000890000)={0xa8ba, 0xffffffffffffffff, 0x800, 0x400, 0x5, 0x8, 0x9e, 0xa9}, &(0x7f0000be3000-0x40)={0x3f, 0x4, 0x4, 0x2000, 0xf1bb, 0x1, 0x279, 0x0}, &(0x7f000043b000)={0x5, 0x3, 0x99, 0x3, 0x1000, 0x0, 0xeb7, 0x8}, &(0x7f0000e76000)={0x0, 0x0}, &(0x7f000030e000)={&(0x7f00009ed000)={0x0}, 0x8}) futex(&(0x7f00006de000)=0x4, 0xc, 0x5, &(0x7f0000053000)={r1, r2}, &(0x7f0000048000)=0x0, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000ae0000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000800008) r1 = syz_open_dev$usbmon(&(0x7f000053e000-0xd)="2f6465762f7573626d6f6e2300", 0xffffffff00000000, 0x141000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f000031b000)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000d34000-0xa)="2f6465762f6375736500", 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000601000-0x44)={{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x50, {0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="69703667726530000000000000000000"}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000e9d000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf63000)=nil, 0xf63000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfe9000)=nil, 0xfe9000, 0x3, 0x32, 0xffffffffffffffff, 0xfffffffffffffffd) mmap(&(0x7f0000fe9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000a3b000-0xb0)={{0x0, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000837000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bf8000-0xa)="2f6465762f70746d7800", 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)=0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000087000)="") write$eventfd(0xffffffffffffffff, &(0x7f00000f9000)=0x0, 0x8) ioctl$sock_ipx_SIOCIPXNCPCONN(0xffffffffffffffff, 0x89e3, &(0x7f0000290000)=0x0) ioctl$int_in(r1, 0x80045430, &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000cd6000)=0x6, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000f3a000-0x90)="") prctl$getreaper(0x0, &(0x7f0000708000)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000051c000-0xa)="2f6465762f70746d7800", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) 2017/11/28 18:58:18 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa080000000405390040000001000480000000", 0x1d) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) r3 = syz_open_dev$mice(&(0x7f000045b000)="2f6465762f696e7075742f6d69636500", 0x0, 0x1) ioctl$TIOCCONS(r3, 0x541d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) preadv(r2, &(0x7f0000c3f000-0x48)=[{&(0x7f0000b43000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8c}, {&(0x7f00003bf000-0x24)="000000000000000000000000000000000000000000000000000000000000000000000000", 0x24}, {&(0x7f0000cf1000-0xf3)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf3}, {&(0x7f000094f000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x56}, {&(0x7f0000ae3000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000e3c000-0x85)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x85}, {&(0x7f0000db5000-0xf7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf7}, {&(0x7f000073e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000953000-0x6f)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6f}], 0x9, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r2 = getpgid(0xffffffffffffffff) prlimit64(r2, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r4, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000d000-0x30)={0xd8, 0x0, &(0x7f0000009000-0xd8)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x20, &(0x7f0000000000)=[@ptr={0x70742a85, 0x0, &(0x7f000000d000-0x5f)="7d", 0x5f, 0x9379, 0x401}, @flat={0x77682a85, 0x101, r5, 0x1}], &(0x7f0000007000)=[0x40, 0x38, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r6, 0x2}, @decrefs={0x40046307, 0x0}, @clear_death={0x400c630f, 0x4, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x80a4, 0x11, 0x0, 0x0, 0x38, 0x0, &(0x7f000000c000)=[@fda={0x66646185, 0x7fff, 0x9, 0x10000}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f0000003000)=[]}}, @free_buffer={0x40086303, r7}, @acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) r8 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r8, 0x4}, @increfs_done={0x40106308, r3, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) r4 = socket$inet(0x2, 0x800, 0xfffffffffffffffa) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000691000-0x102)={0x0, 0xfa, "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"}, &(0x7f0000a37000)=0x102) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000b95000-0x10)={r5, 0x400, 0xcc, 0x400}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 203.101541] binder: 26742:26761 BC_INCREFS_DONE u0000000000000000 node 736 cookie mismatch 0000000000200001 != 0000000000000000 [ 203.101602] binder_alloc: 26742: binder_alloc_buf, no vma [ 203.101623] binder: 26742:26761 transaction failed 29189/-3, size 0-0 line 2870 [ 203.122146] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.269389] binder: 26671:26675 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 203.282422] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000df4000-0xa)="2f6465762f6375736500", 0x2, 0x0) bind$ipx(r0, &(0x7f0000140000-0x10)={0x4, 0x5, 0x80000000, "5429d5ca3121", 0x1ff, 0x0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f000027b000-0x3d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$int_in(r1, 0x5421, &(0x7f0000e4d000)=0x4) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 203.311748] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read(r0, &(0x7f0000c93000-0x67)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x67) r1 = socket$netlink(0x10, 0x3, 0x400000) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109001d000100000101fc000000ef0006800e00000400080504ffff00000000ff00", 0x28}], 0x1) [ 203.373285] binder: 26771:26790 got reply transaction with no transaction stack [ 203.373296] binder: 26771:26790 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 203.375452] binder: 26767:26791 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ae2000)="2f6465762f73657175656e63657200", 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000b03000-0x20)={@multicast1=0xe0000001, @empty=0x0, 0x0, 0x4, [@multicast2=0xe0000002, @multicast2=0xe0000002, @multicast1=0xe0000001, @loopback=0x7f000001]}, 0x20) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x1, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000006, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) r0 = memfd_create(&(0x7f0000ca9000)="7472757374656400", 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000f48000)=@assoc_value={0x0, 0x6}, &(0x7f0000891000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000bb5000-0x8c)={r1, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000594000)=0x8c) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:19 executing program 7: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000f65000)={0x6, 0xffffffffffffff9c, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000002000-0x4)=0x1, 0x4) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x800, &(0x7f0000001000-0xb5)="f9a6ff7cf0fa80dc863b29c6783f6b69c35b820916a55945e6ea839c7c0139453c26f2c406a57ad62b216680abe25a331b71bb99aeb55a4bd4255900a4147530f45ba9bd6fb1d91ed8c7e96368c160377f8dc643882c26a050c1cd8773eba8d6851a90b79e1074f62f8cc4620e6dc279287f6fb47daa9dd811602d67c2e57d8f816ce250e065db3b96e2059da65cbfe1d39165d3021217b3dddcebf645bcee5270faafcd8ef8e11e93951191d2da7019f30402da33") r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000000a000-0x18)={0xaa, 0xe, 0x0}) mmap(&(0x7f00008ff000/0xf000)=nil, 0xf000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000903000-0x64)={&(0x7f00008ff000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, {0x77a, 0xfffffffffffffffd, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3b60c748251475a6336301f42004e4db65b66275c68012b4f67a2d109b8228d8"}}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f000090a000-0x8)={0x0, 0x0}) io_setup(0x7, &(0x7f00008ff000)=0x0) io_destroy(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000003000-0x20)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1, 0x0}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x9) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r2, 0x5, &(0x7f000000c000)=[&(0x7f000000d000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f000000d000-0x9d)="c42b9711d102d2f3e4eb6b42a8b9fd4749fecc9f2cca1ce61c66da0af90a78055513104738b1bb5303dc58a773522b86e5882a519683fcc75d92aa6606d1c37b781f21d6cd349bc2df9196aa8eaf59c206b9be9da58c0d4fa9055d36224e557fb6ffc28863db2830db7e60c91f23b09d0d353fdf4f24762761ffb56036b6d349c0bae080c4cb1da4ac5cd04ec9fecd6baf1aed642e986ccde96f8c222d", 0x9d, 0x8000, 0x0, 0x1, r0}, &(0x7f000000d000-0x40)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000006000)="2f6b3bba6301cd07bcd89bd0e88ae6a3ddd01f2a76a1fde2aa210235824399df3d5df06abb990fa9af4fce16778e580b88ed2de696e3ff23278efce947a486b4e339c024dab43bb16fa6a39e04cb9064b9d40a0e624edeaa96212469c8b2e1561573ad8885990460071a047721b9eae725e50864f42c106cf562657fe0504591994431157e151cf6292d64ce11c1633f4ac930b00f3ef2d2b1e204", 0x9b, 0x100, 0x0, 0x1, r0}, &(0x7f000000d000-0x40)={0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, r1, &(0x7f000000c000)="aa776d9c520b31eeeef63edacece1940591be87e8a91492f7b42d005f293adb67bb99d919a741922711736650c00bc61a7e9aa9a8c1d0b894d8cc5", 0x3b, 0x100000001, 0x0, 0x1, r0}, &(0x7f000000d000-0x40)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f000000d000-0xc5)="15c27566212e42c7e5f8ce74f82984cbe54a83a9e452cb543927af839740aa678171c7b344bd177028f7a59100f85f9034dc9280590cad109836f9efd10a3332b7b79e5d0f4288d556a0d7cfbf4269530f7bf364c1a38b93b9dca67eb7703813ac94571f7547b3e021c03f36d0e4b4482ab50cd8690c863cd07e81314744579507b052518513cbea463c5c7c46db574e408f39224235a3ad99827482c18a90ae80858e4c02fe25f08dbd28d9658ab1d6d070785dc9991c22a23d2736d53ccbebd66329b6fb", 0xc5, 0x6, 0x0, 0x1, r0}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x3, 0x800, 0xffffffffffffffff, &(0x7f0000902000-0x24)="3548bc850f81206e47e71a45388c5b178b5b0a4cc725d9487689ab28bca5b961b0656559", 0x24, 0xffff, 0x0, 0x0, r0}]) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f000000d000)=0x0) r3 = syz_open_dev$mice(&(0x7f000000c000)="2f6465762f696e7075742f6d69636500", 0x0, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000902000)={0xfffffffffffffff7, {{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000909000-0xc)={&(0x7f0000000000)="2e2f66696c653000", 0x0}, 0xc) clone(0x1000000, &(0x7f000000c000)="", &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)="") ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0186404, &(0x7f0000904000)={&(0x7f0000903000/0x1000)=nil, 0x3, 0x2, 0x10, &(0x7f0000905000/0x2000)=nil, 0x3}) read(r1, &(0x7f000000a000-0x64)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x64) [ 203.375465] binder: 26767:26791 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 203.375478] binder: 26767:26791 BC_INCREFS_DONE u0000000000000000 no match [ 203.375487] binder: 26791 RLIMIT_NICE not set [ 203.376688] binder: 26771:26790 transaction failed 29189/-22, size 0-0 line 2755 [ 203.469149] binder: 26767:26806 Acquire 1 refcount change on invalid ref 1 ret -22 [ 203.469161] binder: 26767:26806 got transaction to invalid handle [ 203.469171] binder: 26767:26806 transaction failed 29201/-22, size 64-32 line 2755 [ 203.515871] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000a49000-0xb)="2f6465762f6877726e6700", 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) connect$inet6(r1, &(0x7f0000b96000-0x1c)={0xa, 0x3, 0x7, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1e, &(0x7f0000a97000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000053b000)=0xd0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a45352, &(0x7f00004ae000-0xa8)={{0xdc4, 0x0}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1, 0x80018, 0x6903, 0x80, 0x1, 0x2, 0xd2f, 0x0, 0x3, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ef7000-0xc)="2f6465762f6175746f667300", 0x2c0000, 0x0) write$tun(r4, &(0x7f000037d000)=@pi={0x0, 0x8100, @ipv4={{0x18, 0x4, 0x800, 0xde38, 0x68, 0x1, 0x972b, 0x0, 0x32, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[@timestamp={0x44, 0x2c, 0x8, 0x1, 0x50, [{[], 0x100}, {[], 0x32}, {[@local={0xac, 0x14, 0x0, 0xaa}], 0x3}, {[], 0x6}, {[], 0x130}, {[@remote={0xac, 0x14, 0x0, 0xbb}], 0x100}, {[@remote={0xac, 0x14, 0x0, 0xbb}], 0x5}]}, @rr={0x7, 0xb, 0x6, [@local={0xac, 0x14, 0x0, 0xaa}, @multicast1=0xe0000001]}, @generic={0x87, 0xc, "780ec5f6960a463f622b"}, @ra={0x94, 0x6, 0x7}]}}, @icmp=@address_reply={0x12, 0x0, 0x0, 0x7}}}, 0x6c) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xfff) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000a59000-0x20)={0x101ff, 0x1, 0x1000, 0x1000, &(0x7f00002ba000/0x1000)=nil}) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f000099c000-0xc)={0x1fe, 0x0, &(0x7f0000ce9000/0x2000)=nil}) 2017/11/28 18:58:19 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) connect$nfc_raw(r0, &(0x7f0000e72000-0x10)={0x27, 0x5, 0x7, 0x7}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x10000000800) timerfd_create(0x6, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 203.531509] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 203.569478] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000-0x30)={0x0, 0x0, &(0x7f0000004000)=[], 0xd0, 0x0, &(0x7f000000d000)="62164b44a5c310affb2298c023c7036e8915400419dae89c459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cc508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b5d647d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae284ff729b0d7cf69ba3e02ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a221edb96a57daf9aa006d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 203.581299] binder: undelivered TRANSACTION_ERROR: 29201 2017/11/28 18:58:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00008a5000-0x8)="2f6465762f70746d7800", 0x0, 0x0) r1 = open(&(0x7f0000ced000)="2e2f66696c653000", 0x10000, 0x40) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f000037b000-0x4)=0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x5, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) r2 = dup(r0) ioctl$VT_RELDISP(r2, 0x5605) 2017/11/28 18:58:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031b000-0x9)="2f6465762f72746300", 0x400, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x7) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x10000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000002b000)={r1}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000c6b000-0x4)={r1}) [ 203.610511] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 203.637327] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ioprio_get$pid(0x1, r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00009e4000)="2f6465762f7161745f6164665f63746c00", 0x600000, 0x0) getsockname$packet(r1, &(0x7f00002cd000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000a9c000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x110000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000e9d000)={0x0, r2, 0x0}) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000257000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9, 0x100000000, 0x0, 0x100000000, 0x1, 0xf000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0}) r4 = syz_open_dev$mouse(&(0x7f0000ac8000)="2f6465762f696e7075742f6d6f7573652300", 0xffff, 0x40000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000b1c000-0xe8)={{{@in=@loopback=0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000e48000)=0xe8) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000f74000-0x10)=@common="79616d30000000000000000000000000") ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000cfd000)=0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, &(0x7f0000441000-0x4)=r5) writev(r2, &(0x7f0000dca000)=[], 0x0) ftruncate(r2, 0x5ca7) 2017/11/28 18:58:19 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001ff", 0x22) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x800008040, 0x0) r1 = syz_open_dev$usbmon(&(0x7f000064b000-0xd)="2f6465762f7573626d6f6e2300", 0x8001, 0x80) ioctl$TCSETAW(r1, 0x5402, &(0x7f0000e63000)={0x5, 0x5, 0x101, 0x8, 0x278, 0x101, 0x800, 0x2bba, 0x8, 0x50}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000781000)={0x10015, 0x0, 0xfffffffffffffffc, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat(0xffffffffffffff9c, &(0x7f0000311000-0x8)="2e2f66696c653000", 0x2, 0x44) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$usbmon(&(0x7f00007b0000-0xd)="2f6465762f7573626d6f6e2300", 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$void(r4, 0xc0045c78) [ 203.657294] binder: 26834:26839 got reply transaction with no transaction stack 2017/11/28 18:58:19 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f0000127000)="2f6465762f72666b696c6c00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f0000006000-0x10)=@in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000005000)=[], 0x0, &(0x7f0000000000)=[], 0x0, 0x0}, 0x0) r2 = creat(&(0x7f00007a5000-0x8)="2e2f66696c653000", 0x1) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f000082d000)={0x6000, 0x3000, 0x80005, 0x3, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000000)=@buf={0x41, &(0x7f0000d91000-0x45)="317fe64e62b142288781d71ea0c4e09c21a8d4aca0de5348d85d976e963dbd73fe7af3c1b6091b5922649ddacba79c3252531083e38e8e18232eb39a724e9988e9"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000459000)={0x0, 0x2, 0x3ff, 0x3, 0x65c}) ioctl$sock_ifreq(r1, 0x8946, &(0x7f0000002000-0x28)={@common="6c6f0000000000000000000000000000", @ifru_flags=0x0}) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f000021e000)={0x4000000002, 0x78, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfc, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x48, r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00008cb000-0x14)={r0, r2, 0x1, 0x0, r2}, 0x14) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000208000)=0x5, 0x4) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000000000/0xf6b000)=nil, 0xf6b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f00007c7000)="2e2f66696c653000") signalfd(0xffffffffffffff9c, &(0x7f00005bc000)={0x80000000}, 0x8) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r6, &(0x7f0000f67000)={0x0, 0x0, &(0x7f0000c60000-0x10)=[{&(0x7f0000387000)=[{0x14, 0x40000106, 0xf01, 0x0, 0x0, "03"}], 0x14}], 0x1, &(0x7f0000f69000)=[], 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)="2e2f66696c653000", 0x0) recvmsg(r5, &(0x7f0000018000-0x38)={&(0x7f0000e51000)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000fec000)=[{&(0x7f0000a6b000-0xf7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf7}], 0x1, &(0x7f0000e13000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x79, 0x6}, 0xfc) mount(&(0x7f0000008000-0x8)="2e2f66696c653000", &(0x7f0000006000)="2e2f66696c653000", &(0x7f0000b15000)="746d70667300", 0x0, &(0x7f0000027000-0x3d)="71fc5d67c23484af47813d279fbc87f5223987ca25c8f275c7ad5b1d9d08633be6debd92b7e2c799629d871d6ee422648a8e9d24d67c167de57f2c37") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000098b000)="2f6465762f7161745f6164665f63746c00", 0x89c7c0b43788d606, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000d7d000-0x42)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000ab0000)={0xffffffffffff7035, {{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) 2017/11/28 18:58:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000793000-0xd)="2f6465762f62696e6465722300", 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000001000-0x8)="2e2f66696c653000", 0x8040, 0x53) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f72746300", 0x800000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001000-0x20)=[{r0, 0x4008, 0x0}, {r1, 0x4, 0x0}, {r2, 0x13, 0x0}, {r3, 0x1, 0x0}], 0x4, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000cc5000-0x8)={0x7}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x1, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000562000)={@generic="5c4d20c3172a2090cadf7e2f2f072ff8", 0x1}) [ 203.678975] binder: 26835:26840 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 203.678988] binder: 26835:26840 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200008) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 203.679008] binder: 26835:26840 BC_INCREFS_DONE u0000000000000000 no match [ 203.679060] binder: 26840 RLIMIT_NICE not set [ 203.682973] binder: 26834:26847 transaction failed 29189/-22, size 0-0 line 2755 [ 203.736785] binder: 26835:26873 BC_INCREFS_DONE uffffffffffffffff no match [ 203.736808] binder: 26835:26873 got transaction to invalid handle [ 203.736831] binder: 26835:26873 transaction failed 29201/-22, size 40-16 line 2755 2017/11/28 18:58:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r8, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r9 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r9, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f000044b000)=0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00002c3000-0x10)={0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:19 executing program 4: pipe2(&(0x7f0000430000-0x8)={0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) munmap(&(0x7f000036d000/0x2000)=nil, 0x2000) 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f000000a000-0x8)={0x0, 0x0}) [ 203.739701] binder: 26835:26873 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 203.739713] binder: 26835:26873 BC_ACQUIRE_DONE u0000000020000000 no match [ 203.739725] binder: 26835:26873 BC_INCREFS_DONE u0000000000000000 node 746 cookie mismatch 0000000000200001 != 0000000000000000 2017/11/28 18:58:19 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f000037f000-0x18)={0x10000, 0x4, 0x3, 0x4, 0x42}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000d37000-0xa8)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xfffffffffffffff8, 0x1, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2(&(0x7f0000fa2000-0x8)={0x0, 0x0}, 0x80000) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000630000-0x4)=0x9, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) sysfs$3(0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f00007aa000)="2f6465762f696e7075742f6d6f7573652300", 0x800, 0x80000) openat(r1, &(0x7f000098c000)="2e2f66696c653000", 0x0, 0x8) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 203.762906] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 203.772394] binder: 26835:26873 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 203.772403] binder: 26835:26873 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 203.772414] binder: 26835:26873 BC_INCREFS_DONE u0000000000000000 no match [ 203.772422] binder: 26873 RLIMIT_NICE not set [ 203.811596] binder: undelivered TRANSACTION_COMPLETE [ 203.846705] tmpfs: Bad mount option qü]gÂ4„¯G [ 203.883958] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 203.889846] binder: 26887:26890 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 203.889860] binder: 26887:26890 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 203.889878] binder: 26887:26890 BC_INCREFS_DONE u0000000000000000 no match [ 203.889890] binder: 26890 RLIMIT_NICE not set [ 203.903227] tmpfs: Bad mount option qü]gÂ4„¯G [ 203.918397] binder: 26887:26893 BC_INCREFS_DONE uffffffffffffffff no match [ 203.918411] binder: 26887:26893 got transaction to invalid handle [ 203.918422] binder: 26887:26893 transaction failed 29201/-22, size 40-16 line 2755 [ 203.922095] binder: 26887:26893 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 203.922107] binder: 26887:26893 BC_ACQUIRE_DONE u0000000020000000 no match [ 203.922120] binder: 26887:26893 BC_INCREFS_DONE u0000000000000000 node 750 cookie mismatch 0000000000200001 != 0000000000000000 [ 203.925720] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 203.932717] binder: 26887:26893 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 203.932727] binder: 26887:26893 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 203.932740] binder: 26887:26893 BC_INCREFS_DONE u0000000000000000 no match [ 203.932748] binder: 26893 RLIMIT_NICE not set [ 203.966569] binder: undelivered TRANSACTION_COMPLETE [ 204.177616] binder: 26834:26839 transaction failed 29201/-71, size 2-1886661253 line 2670 2017/11/28 18:58:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000d000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, 0x0, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, r7, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r8 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r8, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f00006ec000)=0xea, 0x4, 0x1, &(0x7f00000ad000-0x8)={0x77359400, 0x0}, &(0x7f0000d1a000)=0x5, 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00007e3000-0x8)="2e2f66696c653000", 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) symlink(&(0x7f0000dfd000)="2e2f66696c653000", &(0x7f00007db000-0x8)="2e2f66696c653000") prctl$setname(0xf, &(0x7f0000000000)="736563757269747900") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000dc9000)="2f6465762f73657175656e6365723200", 0x400, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f000067f000)=@int=0x0, &(0x7f0000f30000-0x4)=0x4) r4 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000d1a000)={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r5 = dup2(0xffffffffffffff9c, r4) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000354000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000069a000)=0xb) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000173000)=0x0, &(0x7f0000ff9000-0x4)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000a77000-0x4)=0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000029000-0x10)="2f6465762f73657175656e6365723200", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, &(0x7f000022f000-0x50)={{0xff, 0xc}, {0x10000, 0xfff}, 0x0, 0xfffffffffffffffc, 0x88, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f000005f000-0x1)={0x2, [0x9, 0x8]}, &(0x7f0000e62000-0x4)=0x8) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) sendto$inet6(r4, &(0x7f00007a9000-0x1)="", 0x0, 0xfffffefffffffffa, &(0x7f0000f63000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f0000509000-0x20)={{&(0x7f0000672000/0x2000)=nil, 0x2000}, 0x20000000000, 0x0}) setsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f0000002000)="b46129334ea10e2766fa41e5897f3ead55c6624b", 0x14) writev(r1, &(0x7f0000c2c000-0x8)=[{&(0x7f0000c17000-0x2b)="2900000018003119ef6eff00001100070a0000000000ff067a0000000c000800040000001f00000001", 0x29}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b94000)="2f6465762f6b766d00", 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f000040e000)={0x2, 0x0, [{0x1d9, 0x0, 0x0}, {0x400, 0x0, 0xffffffffffffffff}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2017/11/28 18:58:19 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) lsetxattr(&(0x7f0000215000)="2e2f66696c653000", &(0x7f0000921000)=@known="73797374656d2e736f636b70726f746f6e616d6500", &(0x7f0000099000)="736563757269747900", 0x9, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f0000069000-0x8)={0x0, 0x0}) 2017/11/28 18:58:19 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000", 0x1e) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x3, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00009e4000-0xc)={0x0, 0xffffffffffffff9c, 0x1}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000767000)=0x7, 0x4) socketpair$llc(0x1a, 0x3, 0x0, &(0x7f0000d4b000)={0x0, 0x0}) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000298000)=0x0, &(0x7f0000b0a000)=0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a0000-0xc)="2f6465762f73657175656e6365723200", 0x14000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000805000)={r1, 0xf98}) getsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f000089a000-0x4)=0x0, &(0x7f0000c27000-0x4)=0x4) setns(r2, 0x8000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00008cf000-0x4)={r1}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00006b6000)={0x0, 0x0, 0x0}, &(0x7f0000180000)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000f36000)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00006cf000)={{0x10001, 0xdc7}, {0x9, 0x5}, 0xc47, 0x2, 0xedc, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat(0xffffffffffffffff, &(0x7f0000960000)="2e2f66696c653000", 0x20000, 0x11) ioctl$TCXONC(r5, 0x540a, 0x101) writev(r4, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) madvise(&(0x7f0000f95000/0x4000)=nil, 0x4000, 0xb) [ 204.198834] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.235400] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.260601] binder: 26921:26932 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 204.278377] netlink: 1 bytes leftover after parsing attributes in process `security'. 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f000008c000)="2f6465762f696e7075742f6d6f7573652300", 0x1, 0x8000) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000d08000)=0x6, 0x4) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000a30000-0x14)={0x2, 0x5, 0x0, 0x4, 0x7}) 2017/11/28 18:58:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000dbb000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x5, 0x10d800) connect$unix(r0, &(0x7f0000a81000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 204.278429] IPv6: NLM_F_REPLACE set, but no existing node found! 2017/11/28 18:58:19 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x5, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) modify_ldt$write(0x1, &(0x7f0000c68000)={0xe0, 0xffffffff, 0x0, 0x7, 0x18, 0xfffffffffffffff7, 0x8, 0x9, 0x8001, 0x100000001}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 204.291135] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:19 executing program 5: mmap(&(0x7f0000000000/0xdbf000)=nil, 0xdbf000, 0x1, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000dbf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00003fc000)="2f6465762f73657175656e6365723200", 0x10200, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000-0x9)="2f6465762f72746300", 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00007fb000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") syz_emit_ethernet(0x77, &(0x7f0000027000-0x77)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x20086dd, @ipv6={0x5, 0x6, "a228af", 0x41, 0x29, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @loopback={0x0, 0x1}, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x3c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @routing={0x4, 0x0, 0x0, 0x0, 0x0, []}], @udp={0x0, 0x0, 0x9, 0x0, "b5"}}}}}}, 0x0) mmap(&(0x7f0000dc0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x1}) mmap(&(0x7f0000dc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x2000000080005, 0x36b, &(0x7f0000f98000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000058c000-0x11)="2f6465762f7161745f6164665f63746c00", 0x0, 0x0) mmap(&(0x7f0000dc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00008ea000-0x10)={0x0, 0x8, "8677927ebcc82e69"}, &(0x7f0000394000)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001000)={r4, 0xad, "eade151b9e9cd8ead616c60f64632184da6231028d0d2b7e206336a24a188b043feae13948d354b6c9ceb3aa26d4d743d0a26adb1fd03ae2597db79422b9bb1f31c94a2d5d9a6f3405a32205081aa3c0387d5c8423655eafe41b5cde218c0411a7b6e4bc0a9fbd758d7cb22d6b044cecbbcfbb960d50f403ddb223a5c38fe47d7516ddd11c8f9d7e9659359c9e7d1dc8822a64f872a47ee3046bf59c8494763fbe01622d21735961d1b800d5db"}, &(0x7f0000002000-0x4)=0xb5) r5 = socket$inet6(0xa, 0x80005, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000193000)={0x0, 0x10001}, &(0x7f0000001000-0x4)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r6, 0x1, 0x0}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x80000040fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00009c7000)={0x0, 0x0}, 0x800) bind$alg(r7, &(0x7f0000258000)={0x26, "6165616400000000000000000000", 0x2000000100, 0x146, "7874732873657270656e742900000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/11/28 18:58:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x667d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000312000-0x8)={0x0, 0x0}) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f000027b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000aed000)=0xd6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$sg(&(0x7f000086d000)="2f6465762f73672300", 0xd, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f00004fe000)=0x5) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000261000)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x3, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 204.291788] binder: 26921:26949 BC_INCREFS_DONE u0000000000000000 node 754 cookie mismatch 0000000000000003 != 0000000000000000 [ 204.291803] binder: 26921:26949 got transaction to invalid handle [ 204.291814] binder: 26921:26949 transaction failed 29201/-22, size 40-16 line 2755 [ 204.312234] binder: 26921:26949 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 204.312246] binder: 26921:26949 BC_ACQUIRE_DONE u0000000020000000 no match [ 204.312259] binder: 26921:26949 BC_INCREFS_DONE u0000000000000000 node 754 cookie mismatch 0000000000200001 != 0000000000000000 [ 204.332956] binder: 26931:26936 got reply transaction with no transaction stack [ 204.332965] binder: 26931:26936 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 204.333488] binder: 26931:26936 transaction failed 29189/-22, size 0-0 line 2755 [ 204.339623] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.348102] binder: 26931:26947 got reply transaction with no transaction stack [ 204.348109] binder: 26931:26947 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 204.349375] binder: 26931:26947 transaction failed 29189/-22, size 0-0 line 2755 [ 204.364092] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.368908] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 204.368956] IPv6: NLM_F_REPLACE set, but no existing node found! [ 204.370406] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.418453] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.441169] binder: 26964:26969 got reply transaction with no transaction stack [ 204.441180] binder: 26964:26969 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 204.441341] binder: 26964:26969 transaction failed 29189/-22, size 0-0 line 2755 [ 204.465244] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.478494] QAT: Invalid ioctl [ 204.520343] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.543771] binder: 26985:26990 got reply transaction with no transaction stack [ 204.543782] binder: 26985:26990 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 204.543905] binder: 26985:26990 transaction failed 29189/-22, size 0-0 line 2755 [ 204.545795] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.545961] QAT: Invalid ioctl [ 204.598828] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:20 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000001000-0x20)={@common="69726c616e3000000000000000000000", @ifru_flags=0x4000}) r2 = dup2(r0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000cf0000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockname$unix(r2, &(0x7f0000839000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000f5b000-0x4)=0x6e) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000838000-0x10)={0xefff, 0x9000, 0x0}) ioctl$KDGETLED(r5, 0x4b31, &(0x7f00006e6000-0x1)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00009eb000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000991000)=0x4, 0x4) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:20 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa080000000405390040000001000480000000000000", 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000343000)="2f6465762f7663732300", 0x662, 0x2000000202) ioctl$TIOCNXCL(r0, 0x540d) 2017/11/28 18:58:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f000020d000-0x4)=0x6d95, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000b5b000/0x4000)=nil, 0x4000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r7, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, r6, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r8 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r8, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) r1 = syz_open_dev$vcsa(&(0x7f00007e0000)="2f6465762f766373612300", 0xa4, 0xa000) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000298000-0x70)={[{0x2, 0x24f, 0x100000000, 0x9, 0x28000, 0x6, 0x3f, 0x48, 0x3, 0x9, 0x2, 0x0, 0x800}, {0x3, 0x40000000, 0x100000000, 0x2bf, 0x80000000, 0x100, 0x4, 0x40, 0x3, 0x0, 0x6, 0x400, 0x7fff}, {0x7d1d, 0x7ff, 0x6, 0x8, 0x1ff, 0x7fffffff, 0x9, 0x800, 0x831e, 0x8001, 0xa4, 0x1f, 0x80000001}], 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) modify_ldt$write(0x1, &(0x7f0000255000)={0x3, 0x20000800, 0x1000, 0xfffffffffffffffe, 0x510, 0x2, 0x7, 0x8, 0x2, 0x7f}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000c1f000)={r1, 0x18, &(0x7f0000284000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bind(r1, &(0x7f0000c6c000)=@in6={0xa, 0x0, 0x6, @loopback={0x0, 0x1}, 0x7f}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000e2e000)=r2, 0x4) 2017/11/28 18:58:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x4, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x20000000000, 0xfffffffffffffffe, 0x0}, 0x0, 0x10001, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffd, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x400000a) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000f26000)="2f6465762f766373612300", 0x3ffff, 0x400000002) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000eb000)={r1, 0x18, &(0x7f000041c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000ef2000-0xa)="2f6465762f7663732300", 0x10000, 0x40000) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000a3000-0x8)="2e2f66696c653000", 0x100) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000be7000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") inotify_rm_watch(r3, r4) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f000047d000)={0xa0001, 0x0, [0x10001, 0xe2cb, 0x64, 0xbea7, 0x9, 0x80, 0x1ff, 0x100000002000005]}) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00009bf000)={0x2, 0x5, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3, "0000000000000008", "55e7de8f981d08eee2db3e3a7bb763aebed3ec000000000000003c1741c66efe", 0x9, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fba000)="2f6465762f7667615f6172626974657200", 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000001000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffe, 0x0}], 0x5) setsockopt$inet_int(r6, 0x0, 0x10000000000040, &(0x7f0000001000-0x4)=0x0, 0x4) get_mempolicy(&(0x7f00001c8000)=0x0, &(0x7f00002e4000)=0x0, 0x10000, &(0x7f0000d07000/0xb000)=nil, 0x2) signalfd4(r2, &(0x7f0000675000)={0xfffffffffffff7fd}, 0x8, 0x80000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000d7d000)=0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000c36000)={r7, &(0x7f000082a000-0x1)="", &(0x7f0000571000-0x1)="16", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000977000-0x18)={r7, &(0x7f0000b84000-0x18)="", &(0x7f00003fd000-0xd7)=""}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000b77000)={0x0}, &(0x7f0000736000-0x4)=0x4) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x40042409, 0xffffffffffffffff) 2017/11/28 18:58:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) r0 = socket$inet(0x2, 0x80005, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00001a6000-0x98)={0x0, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x0}, &(0x7f0000001000-0x4)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x0, 0x7fff, 0xe2cad4a, 0x4, 0x1000, 0x6, 0xc1f, {r1, @in6={{0xa, 0x2, 0x6, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3ff, 0x3, 0x7, 0x7, 0x0}}, &(0x7f0000554000-0x4)=0xb8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00001b8000)="2f6465762f6877726e6700", 0x0, 0x0) epoll_pwait(r2, &(0x7f00002d2000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x9, 0x9a, &(0x7f0000f58000)={0xfffffffffffffff9}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000c97000)="2f6465762f70746d7800", 0x10200100200000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00003a1000)={0x5, r3, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000e92000)={0x0, @in6={{0xa, 0x2, 0x1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x3, 0x8, 0x9, 0x1, 0x2f, 0x9, 0x1b, 0x43, 0x8ab, 0x3, 0x19d70749, 0x1ff, 0x3, 0x1864, 0x9]}, &(0x7f0000d20000)=0x108) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000706000-0x8)={0x0, 0x2}, &(0x7f0000ac1000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00009d6000-0xb8)={0x0, 0x2, 0xfffffffffffffffd, 0xa, 0x25, 0x1f, 0x7, 0x4, {r5, @in6={{0xa, 0x1, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x100000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x401, 0x101, 0x1ff, 0x3}}, &(0x7f00006f2000-0x4)=0xb8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000224000)={r6, 0x815, 0x20}, &(0x7f0000b7d000-0x4)=0xc) mmap(&(0x7f0000000000/0xc24000)=nil, 0xc24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00009bf000)="2f6465762f73657175656e63657200", 0x80000000509001, 0x0) syz_open_dev$loop(&(0x7f0000c20000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x2) unshare(0x8000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000cc3000)=0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00003bd000)={0xffff, 0x200, 0x2, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0}, &(0x7f00003f9000)=0x20) gettid() mkdir(&(0x7f00000eb000)="2e2f66696c653000", 0x1f) [ 204.769107] binder: 26921:26932 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 204.777469] binder: 26921:26932 BC_INCREFS_DONE u0000000000000000 node 754 cookie mismatch 0000000000000002 != 0000000000000000 [ 204.789108] binder: 26932 RLIMIT_NICE not set [ 204.797318] binder: undelivered TRANSACTION_COMPLETE [ 204.832096] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.846626] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.850661] binder: 27005:27009 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00007a5000)={0x10000, 0x113000, 0x0}) r2 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f000076b000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r2) keyctl$assume_authority(0x10, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000d91000-0x9)="2f6465762f6b766d00", 0x280, 0x0) r3 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000669000-0x138)={0x2, 0x8, 0x0, 0xff, 0x5, [{0xfffffffffffffc00, 0x8, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, {0x4, 0xce2, 0x6, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0}, {0x0, 0x348, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0}, {0x40, 0x8001, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, {0x4, 0x6, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0}]}) r4 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 204.850675] binder: 27005:27009 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 204.850708] binder: 27005:27009 BC_INCREFS_DONE u0000000000000000 no match [ 204.850718] binder: 27009 RLIMIT_NICE not set [ 204.853320] binder: 27000:27004 got reply transaction with no transaction stack 2017/11/28 18:58:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r6 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r6, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r7 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r7, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001000-0x20)={@generic="4db7aff725c2821afde5e640b1d03185", @ifru_flags=0x8000}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000dd1000-0xf)="2f6465762f73657175656e63657200", 0xfd, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001000-0x20)={@common="62637368300000000000000000000000", @ifru_addrs={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl(r1, 0x6, &(0x7f0000001000-0x4)="1d42f75e") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000c31000)="6b657972696e6700", &(0x7f0000cee000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f000003e000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000a26000-0x65)="68f750ed91fd0918303ecf000000006a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb24932e", 0x65, r2) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r3) r4 = getpid() ptrace$getenv(0x4201, r4, 0x7, &(0x7f0000061000)=0x0) keyctl$assume_authority(0x10, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r5 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00008ae000)={[{0x2, 0x9, 0x20, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x20, 0x4, 0x937, 0x7f, 0x1b1}, {0x6c7, 0x4, 0x2, 0x1, 0x8, 0x8001, 0x7, 0xffe, 0x7, 0x8, 0x7, 0x6, 0x4}, {0x1c, 0x6, 0x8, 0xc, 0x80000001, 0x483, 0x51, 0x4, 0x1, 0x4f22, 0x1f, 0x0, 0x401}], 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f000000c000)={r6, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f000047f000)="2f6465762f696e7075742f6d69636500", 0x0, 0x40020481) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 204.853328] binder: 27000:27004 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 204.853449] binder: 27000:27004 transaction failed 29189/-22, size 0-0 line 2755 [ 204.876315] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f00000e9000-0xc)={0x0, 0x0, 0x0}, 0xc) fcntl$setown(r0, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000561000-0x4)=0x0, &(0x7f00006b1000-0x4)=0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 204.892238] binder: 27005:27020 BC_INCREFS_DONE uffffffffffffffff no match [ 204.892249] binder: 27005:27020 got transaction to invalid handle 2017/11/28 18:58:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00006a8000)=[{&(0x7f0000000000)="60dd45e603d974d0683af4648cb432307b09f5e508c421fcfdb1d155846cbb098de7f1a9a3631c4f2e42741d7dfd353bd58f8602f513512c7426d7a8e6e219c2de2d865d4cbfacc725a59938edd561e7f061a5ffa976d8d09843de6b80cc01f60ebeece9761a852b03c43caddcd729b0ca844eb8bddd9e8912b54e450b0a79b29cf753048ef514f396bf722683f321b05b4e534ac407b292b65b7d79b7759e7b", 0xa0}, {&(0x7f0000000000)="289639620febd76648e87775a5b5d1b3a1ea5e90424b353c5edc6a861fb429782a1ec6e996350b83fa1224c372", 0x2d}], 0x2, 0xd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r2) fsetxattr(r1, &(0x7f0000eaf000)=@known="636f6d2e6170706c652e46696e646572496e666f00", &(0x7f0000dff000-0xf)="2f6465762f73657175656e63657200", 0xf, 0x2) keyctl$assume_authority(0x10, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000074d000)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000085c000)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f000065a000)={r0, r1, 0x80000000}) r5 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r6 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f000000c000)={r6, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000b000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, r5, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) r6 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r6, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r7 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r7, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:20 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) [ 204.892259] binder: 27005:27020 transaction failed 29201/-22, size 40-16 line 2755 [ 204.896094] binder: 27005:27020 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 204.896105] binder: 27005:27020 BC_ACQUIRE_DONE u0000000020000000 no match 2017/11/28 18:58:20 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) r3 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f000061c000)=[{0x0, 0x2}], 0x1) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 204.896116] binder: 27005:27020 BC_INCREFS_DONE u0000000000000000 node 768 cookie mismatch 0000000000200001 != 0000000000000000 [ 204.899663] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.902756] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r5 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r5, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r6 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r6, 0x4}, @increfs_done={0x40106308, r4, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 204.914229] binder: 27005:27020 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 204.914240] binder: 27005:27020 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 204.914252] binder: 27005:27020 BC_INCREFS_DONE u0000000000000000 no match [ 204.914260] binder: 27020 RLIMIT_NICE not set [ 204.916590] binder: 27022:27024 got reply transaction with no transaction stack [ 204.916601] binder: 27022:27024 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 204.917158] binder: 27022:27024 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 204.917422] binder: 27022:27024 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 204.917435] binder: 27022:27024 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 204.917450] binder: 27022:27024 BC_ACQUIRE_DONE u0000000000000000 no match [ 204.917462] binder: 27022:27024 BC_INCREFS_DONE u0000000000000000 no match [ 204.917469] binder: 27022:27024 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 204.917479] binder: 27024 RLIMIT_NICE not set [ 204.943657] binder: 27022:27034 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 204.943698] binder: 27022:27034 BC_FREE_BUFFER u0000000000000000 no match [ 204.943708] binder: 27022:27034 got reply transaction with no transaction stack [ 204.943720] binder: 27022:27034 transaction failed 29201/-71, size 0-8 line 2670 [ 204.946237] binder: undelivered TRANSACTION_COMPLETE [ 204.984453] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 204.989073] binder: 27039:27042 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 204.989087] binder: 27039:27042 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 204.989104] binder: 27039:27042 BC_INCREFS_DONE u0000000000000000 no match [ 204.989116] binder: 27042 RLIMIT_NICE not set [ 204.994479] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.036146] binder: 27039:27049 BC_INCREFS_DONE uffffffffffffffff no match [ 205.036159] binder: 27039:27049 got transaction to invalid handle [ 205.036169] binder: 27039:27049 transaction failed 29201/-22, size 40-16 line 2755 [ 205.040385] binder: 27039:27049 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 205.040398] binder: 27039:27049 BC_ACQUIRE_DONE u0000000020000000 no match [ 205.040412] binder: 27039:27049 BC_INCREFS_DONE u0000000000000000 node 774 cookie mismatch 0000000000200001 != 0000000000000000 [ 205.044351] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.049619] encrypted_key: master key parameter '0>Ï' is invalid [ 205.053978] binder: 27039:27049 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 205.053990] binder: 27039:27049 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 205.054124] binder: 27039:27049 BC_INCREFS_DONE u0000000000000000 no match [ 205.054133] binder: 27049 RLIMIT_NICE not set [ 205.057633] binder: 27048:27050 got reply transaction with no transaction stack [ 205.057642] binder: 27048:27050 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 205.057771] binder: 27048:27050 transaction failed 29189/-22, size 0-0 line 2755 [ 205.059292] encrypted_key: master key parameter '0>Ï' is invalid [ 205.060138] binder: 27048:27050 got reply transaction with no transaction stack [ 205.060146] binder: 27048:27050 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 205.060697] binder: 27048:27050 transaction failed 29189/-22, size 0-0 line 2755 [ 205.072170] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.080193] binder: undelivered TRANSACTION_COMPLETE [ 205.087275] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.129416] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.129887] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.133955] binder: 27063:27066 got reply transaction with no transaction stack [ 205.133965] binder: 27063:27066 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 205.134300] binder: 27063:27066 transaction failed 29189/-22, size 0-0 line 2755 [ 205.135805] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.141935] binder: 27064:27067 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 205.141972] binder: 27064:27067 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 205.141989] binder: 27064:27067 BC_INCREFS_DONE u0000000000000000 no match [ 205.142003] binder: 27067 RLIMIT_NICE not set [ 205.170866] binder: 27064:27076 BC_INCREFS_DONE uffffffffffffffff no match [ 205.170880] binder: 27064:27076 got transaction to invalid handle [ 205.170890] binder: 27064:27076 transaction failed 29201/-22, size 40-16 line 2755 [ 205.171416] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.175888] binder: 27064:27076 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 205.175902] binder: 27064:27076 BC_ACQUIRE_DONE u0000000020000000 no match [ 205.175913] binder: 27064:27076 BC_INCREFS_DONE u0000000000000000 no match [ 205.175926] binder: 27064:27076 Acquire 1 refcount change on invalid ref 0 ret -22 [ 205.175941] binder: 27064:27076 transaction failed 29189/-22, size 0-0 line 2755 [ 205.209812] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.213624] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.222628] binder: 27078:27081 got reply transaction with no transaction stack [ 205.222638] binder: 27078:27081 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 205.223179] binder: 27078:27081 transaction failed 29189/-22, size 0-0 line 2755 [ 205.253405] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.283085] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.288136] binder: 27084:27086 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 205.288148] binder: 27084:27086 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 205.288163] binder: 27084:27086 BC_INCREFS_DONE u0000000000000000 no match [ 205.288174] binder: 27086 RLIMIT_NICE not set [ 205.313787] binder: 27084:27091 BC_INCREFS_DONE uffffffffffffffff no match [ 205.313798] binder: 27084:27091 got transaction to invalid handle [ 205.313809] binder: 27084:27091 transaction failed 29201/-22, size 40-16 line 2755 [ 205.316735] binder: 27084:27091 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 205.316745] binder: 27084:27091 BC_ACQUIRE_DONE u0000000020000000 no match [ 205.316758] binder: 27084:27091 BC_INCREFS_DONE u0000000000000000 node 788 cookie mismatch 0000000000200001 != 0000000000000000 [ 205.320035] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.326266] binder: 27084:27086 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 205.326278] binder: 27084:27086 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/11/28 18:58:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x7c31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) fchdir(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sndseq(&(0x7f0000779000-0xd)="2f6465762f736e642f73657100", 0x0, 0x103000) 2017/11/28 18:58:21 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000bd8000)="2f6465762f6b766d00", 0x40000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000c01000)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0186404, &(0x7f000023a000+0x87d)={&(0x7f0000000000/0x1000)=nil, 0x9, 0x6, 0x3, &(0x7f00000bf000/0x2000)=nil, 0x6}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000ca4000-0x4)=0x0, &(0x7f0000916000-0x4)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) syz_open_dev$binder(&(0x7f00008e3000)="2f6465762f62696e6465722300", 0x0, 0x2) 2017/11/28 18:58:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000843000-0x9)="2f6465762f76637300", 0x20100, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00004ce000-0x10)={0x0, 0x4, 0x1, 0x6}, &(0x7f00000b5000)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00009ad000)={r1, 0xe4, &(0x7f000051c000)=[@in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x2f1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xcf}, @in6={0xa, 0x2, 0xbd2b, @loopback={0x0, 0x1}, 0x6}, @in6={0xa, 0x3, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, @in6={0xa, 0x1, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, @in6={0xa, 0x3, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7fffffff}, @in6={0xa, 0x3, 0x7e, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, @in={0x2, 0x2, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x7, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}]}, &(0x7f0000d97000)=0xc) r2 = syz_open_dev$usbmon(&(0x7f0000d9d000)="2f6465762f7573626d6f6e2300", 0xf3b8, 0x600000) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f000050f000)={0x12, 0x2, 0xf21, 0x0}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) mprotect(&(0x7f00009a0000/0x11000)=nil, 0x11000, 0x1) 2017/11/28 18:58:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x0, 0x78, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x800000, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000004, 0x10006c7) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000699000)={0x6, r0, 0x0}) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000023000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) r2 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) r3 = memfd_create(&(0x7f0000aa1000-0xd)="00", 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00005d4000)={{{@in=@multicast2=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00006d9000)=0xe8) ioctl$TCSETA(r3, 0x5402, &(0x7f0000740000-0x14)={0x400000000000, 0x0, 0x0, 0xfbffffffffffffff, 0x0, 0x0, 0x200, 0x9, 0x0, 0x7}) r4 = fcntl$dupfd(r1, 0x0, r3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$reject(0x13, 0x0, 0x40800000, 0x81, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x3, 0x8000000000049) r7 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_settings={0x2, 0x0, @raw_hdlc=&(0x7f0000c0f000)={0x0, 0x0}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00004e2000-0xc)={0x0, 0x3, 0x20}, &(0x7f000066d000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000bfd000-0x10)={0x8, 0x8001, 0x100000001, 0x0, r8}, &(0x7f00001fe000)=0x10) setrlimit(0x1, &(0x7f00008b5000-0x10)={0x6, 0xc}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000b90000-0x20)={@common="67726530000000000000000000000000", @ifru_addrs={0x2, 0x0, @rand_addr=0x2000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r9 = dup3(r5, r7, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r9, 0x6431) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) connect$inet(0xffffffffffffffff, &(0x7f0000ce1000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) write$tun(r4, &(0x7f0000ef3000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @icmp=@source_quench={0x11, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x0, @multicast1=0xe0000001, {[]}}, ""}}}, 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r9, 0x4068aea3, &(0x7f0000a3b000-0x68)={0x0, 0x0, [0x7fffffff, 0x6, 0x3, 0x90cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/11/28 18:58:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xb, &(0x7f000000f000-0x10)={0x6, 0x8001}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r4, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r5 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r5, 0x4}, @increfs_done={0x40106308, 0x0, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:21 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa080000000405390040000001000480000000000000", 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)="2f6465762f766373612300", 0x44b, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f0000000000)={&(0x7f0000000000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f0000001000-0x10)=[{&(0x7f0000d16000-0x4d)="f495a6f8643369f33656757a68ab5f8dab19aa0a8c7a090bfa46cbc833131f8ef0e2148e5d522a22c9b695774618695c32044f3f779e38f19e2205c04a03f1291c737c2311d9d24dcff730f4b6", 0x4d}, {&(0x7f0000b1b000-0x5b)="ba73e680638a3ef88147ef256e64c99b4ffd2cc1a60080a2c6790083ef85d6a44c2df9f258f898bab7a594af143a9b08be2d359b4e685173c3d17bfcf2ed7aee7e3ef9532261e0ac945392599d10ba5e215cf940425a1230be2a23", 0x5b}], 0x2, 0x0, 0x0, 0x20044001}, 0x20000040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0x1e, &(0x7f0000e31000)=0x0, &(0x7f00007ae000)=0x4) [ 205.326293] binder: 27084:27086 BC_INCREFS_DONE u0000000000000000 no match [ 205.326304] binder: 27086 RLIMIT_NICE not set [ 205.326334] binder: BINDER_SET_CONTEXT_MGR already set [ 205.326341] binder: 27084:27091 ioctl 40046207 0 returned -16 [ 205.333927] binder: undelivered TRANSACTION_COMPLETE [ 205.913249] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 205.934399] binder: 27097:27099 got reply transaction with no transaction stack [ 205.950170] binder: 27097:27099 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 205.952675] device gre0 entered promiscuous mode 2017/11/28 18:58:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f26000)="2f6465762f6877726e6700", 0x20000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000eee000-0xc)={0x50002009, 0x0}) 2017/11/28 18:58:21 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, &(0x7f0000634000-0x4)=0x7fff) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 205.965506] binder: 27097:27099 transaction failed 29189/-22, size 0-0 line 2755 [ 205.983535] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.002327] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:21 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x9, 0x82070c998c2d74b0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000ddd000)="2f6465762f736e642f74696d657200", 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000011d000-0x4)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f000034f000)="2f6465762f72666b696c6c00", 0x8801, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000d36000-0x8)=@assoc_value={0x0, 0xfffffffffffffff8}, &(0x7f000062b000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000844000)={r3, 0xfffffffffffffffc}, &(0x7f000018e000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000126000)={r4, @in={{0x2, 0x3, @rand_addr=0x8001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4978, 0xfffffffffffffffb, 0xe6, 0x80, 0xa}, 0xa0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) r5 = request_key(&(0x7f0000943000)="7573657200", &(0x7f000002a000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00001c0000-0xc)="2f6465762f72666b696c6c00", 0x0) keyctl$read(0xb, r5, &(0x7f0000c39000-0xd2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd2) r6 = perf_event_open(&(0x7f000011b000)={0x200000000004, 0x78, 0x1000, 0x100000001, 0x6, 0x3ff, 0x0, 0xb5, 0x20100, 0x0, 0x40, 0x80, 0x1000000000000, 0x2, 0x0, 0x5, 0x2, 0xc2, 0x8001, 0x0, 0x4, 0x1ff, 0x7, 0x4, 0x3, 0x40, 0x0}, 0xffffffffffffffff, 0x3f, 0xffffffffffffffff, 0xa) r7 = syz_open_dev$usbmon(&(0x7f000027f000-0xd)="2f6465762f7573626d6f6e2300", 0x200022, 0x101003) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) futex(&(0x7f000000d000-0x4)=0x404, 0x80000000000b, 0x2, &(0x7f000000b000)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000dbe000)={0x0, 0x0, 0xf9fe}) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) exit(0x410) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000fc1000-0x8c)={0x9, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpid() creat(&(0x7f0000c19000)="2e2f66696c653000", 0x2) 2017/11/28 18:58:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000546000-0x4)=0x400, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f00003c9000-0x29)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) getpgid(0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r4, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r5 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r5, 0x4}, @increfs_done={0x40106308, r3, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:21 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup(r0) fsync(r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x8) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r3 = syz_open_dev$tun(&(0x7f00004a4000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x488000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000aa000-0x6a)={0x0, 0x62, "e30f03fc9f00476e374bca192dce99cec28f7460fab16ac205f9baa28150772b512795f367308bec46a6664073fdaa698e5ca4630822ec57cb3bd7c914f59748cfb90d92c752d5205f23232a47a214b8dbdb59231c34157319412ae555f9be1686b2"}, &(0x7f00006eb000-0x4)=0x6a) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000326000)={r5, 0x1}, &(0x7f0000c47000)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00003a7000-0xb8)={r5, 0x7, 0x100000001, 0xffffffff, 0x8, 0x3, 0x76b, 0x100000001, {r6, @in6={{0xa, 0x3, 0xfffffffffffff801, @loopback={0x0, 0x1}, 0x7fffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0xae, 0x101, 0x1, 0x0}}, &(0x7f00001d7000-0x4)=0xb8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00008b0000)={r8, 0x9}, &(0x7f000041a000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000f20000-0x8)={r10, 0x40}, &(0x7f00009f0000)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f000026d000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) write$tun(r4, &(0x7f00008ce000-0x1948)=@hdr={0x3, 0x0, 0x0, 0x0, 0x81, 0x0, @ipv6={0xfffffffffffffffc, 0x6, "85b7e3", 0x1497, 0x84, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x5, 0x6, "bfe240", 0xf82, 0x0, 0xaa4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, [@fragment={0x5aa7c95feda46fa0, 0x7, 0x9, 0x3, 0x2, 0x1000, 0x2}, @routing={0xa7afbc13243ea144, 0x4, 0x3, 0x3b, 0x4, [@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0xff, 0x8, 0xe59a, 0x100000001, 0x6, 0x0, 0x3}, @hopopts={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @dstopts={0x3b, 0x279, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xc2, 0x5a, "fbcc7858c57e50f5fc828dc56fee28cfc0b7a6228ca699d72c6556920f3577c90d9eed5d66fbea48dba658c5fa637cb5a408b7604b4a0ae450fa70096d3162908fc4be5d1e1087220ab483682c076fcc1462370d3ab15211a8ac"}, {0xc2, 0x26, "b201bce74f28db0fa657188c9545eaa9a01fe2434d67ef04f85872df1b27a9acbc5f3f08259e"}, {0xff, 0xe8, "db6b16bb446c6db11b16bc687a2b2c22f649d503c738ea3a8e27a9050a767ed6cb6559c174c225d63392bc2a3338e0c743bf1e86a79b8c9ce435c11475cc6c3d0f864c389f2a60fbbf6149377be62d4f2d44368a6b7dd2bf047eb1f46b40b47c86070b0c11f8ad4fe8e5a70152e15a45728fe7aa59ba454e49a5f7bba69dbcd10a13c5e463eac00c4820d6de147a9a3b6cf7b4d7036c969fb1dd0dae4700548a9783ced27a2f032f8ee63c9bba639afadbffcb0b6d1be78b675143f08c1ac2763e1c2e01ea2ee56e7367ba777756cd2173273886083cf72a00145ef33278c070a18169abdddabfda"}, {0xc2, 0xc9, "cd67bfef513ccca3e89dbf190b22d50242c236c2070e3363cc26cf4c361f5fed39ec69a87c51d8543bcd64d075f263ab7c65786689afe0c078cc97ae806f84ff5a277fb068265fcb28fde18432f47ba02d1b687deb1557d44b14e09812aeafae1d1d13415ab702da90acd177a8e13fae88a9fab366806ff3dcd880b911e0afbab6e1581de0caab54267507b4b89f1f3c068b3886c1c5f091d2e8779ea8ce45bcd0827287f106daf63169fc7c95bdf0c55632235d36534d6d6764eaf21c5c50c80c9866ef7db39bf362"}, {0xff, 0x1000, "72bd941e3532934b6f9748d35ad039e8a759b0ac356370ea483de645f6f134dfdea895e390022d7ab48642ad373aae20570943d5a92244be3a32715546820cc7a6b28817aecdeeba8a15900664d351fa81642d44ebee3183cf9e4b675c0600ccdf8a8c8aa74d7510c58a3cf05c768c2b67459730e853db3d0599fb1a4444d020cf4b6aad321802d9dca4d496c7d7c724dc2b1e7c7255aa342f628998898934cf85c625b3f6a7693af1d30d62a5d27ffe7b9f6baa82048185c4885f86851c3a1991a2f08188b93232e8f07fe67fc5a9bf2e5c528c7507aa8b13743b82cb57cfaa271b66d5b593b234f87ceb40f39b68adc9b3250c71e515de5e5c11cc4f14a472017561eadb486032d2d316142fbbe562842d03e268da294ff20c541add6d951e4c911abcf555394efec3d821b1eda50ce24b3f34946d0fdbc2b5dbcc45bb08809a860c7364905fe0799dcc6b31454d1834c299147eff10de46a5d80744800152e4af4a9bb752a9a9fb266c6cdb843e86d51c81b68bbcab69433d4aad91dde0370942047299003548b4f862c8820434225d9cee524af2320dfcb2a71758fe9ace33108eeaa341a1e0538e50c384f331b1215d1b61805a78df2d557f89c71e3909ad5b5fe37619b201f44987b9ad05cca33ff16e187f693d64266391ad02e74295d485319ea156a0bd39c32259a0df98296229f6f782870a5b15372a73eaed4fcf2e39a601e4f19f27bf0d16c8aea731843cacca8760e3fc18d1f10f1c9f6842a72874bed6cbdf79d21e37c8259c4ff5872426874b25f2d2cf0cef882e54d44bdb5f2fb8a6987f5f2c38127de765abab8534367a6f2c9410509c475bf86ae870c0d6c8e1cf46124b7f768f7832d77e69a8ac955c80fe273df2e7e16b625d0f641d2f6aff11b8b83660f085eb82e740fd37404d18ae95debf6f7b254ea84b8ecbdad4e5b39d1f39acbc238db80beaaaf81b33605479d9d4c5717e9ef5acc985bf113bade8c3aff66b3d696a45db005349a14e458c47375257b79aef63ccfe7e259ceea99ea13181431a08fbf95985c90c1fc0f301a3f34b8ad01fc35babe2d5af1df087dcec9eecc2fb2f2399cf4669ecca6f99e32905667764b01e939ce4e8c1c2272c2d53419215e50951d88fe2482770037a0134dd766b8d4659ba947c6bfa1ca38bfc3dded826ca4bf7307bcabd82148e853c2a8cae5dbd8849dfcdfb0a1dadfb952155b78cc6e224b25b8bb44f4af4eedaab49aa6f613d8ccba956a06d9cb539c65152d538763cb5bf031c50031c46686e9f947ec893f815cb52303ef0c098be4dc07c3ef4be380d48907fed99a7009c6ef9319c3017f362fb94fd8becfcddcb7efb0ccc837ec097eb0bd031070b952dbc64737f5a60af7bb317d7b9e08b53e353b725486c9b0bb0fdb8e6d032a18238ddfce993638f3fccb01252571f98402f4fdda5e5952cde5e6f86e09e1486d07b0be95d4716cbf050afad61ed7f729926cf7d5943b7686bad38d841a1b18b01b49545acbd7ff63c489affda7724defcf53418a28a7e33a55069b25b7314955c4699827fc5e8343c01756a1a69198db04d3586201c2cd61dcb9f118d752d8f5a59c61d8139b4a598d333cffaf3f6f77268adb0772823427f7555f046a595f5c1dcc1117744a808822c3eed57f19bde7c7621153813def4cb0b93b3b7dbe975f5cf38bced114e455b806840fa685d597dc87d3e3f43e8b08d82db2d6c7bf594a87228fefa340a7565a2034d69e095253bff2dcd1c2bb6bb50346636ff17b618cca0fb014c0408dc1630fea504759c0d7668eb7a1c224020b2cc85bbfcfc503acca084c9b77aab06ab7c541c4f655e26c17e63ce9854b354355a968aadb53721c1dfb216b4ac9a6f035b1105d7c0c64d7aab5336772e009aff3742f384a484449eeff7d80bee154f5268ac159530223285e42286216b87e4645f9b45b18455e3fc4a305f8c879390863c5e3cf67636f0b68687195f144f99aee9acc3b1431a66faec69e18eed94b089d830e96cb19fb2984cd8fef04f6a7253795cbab81573af6c01b24ca2e6719c7d14eb61aec2f996718bf18e7379d831690edbf4f54ab251485774c7e8afa5263c582c31cdda18aace6ec47ad433ab462b24a61f9d6cfddc8daa9ec14ce5beaed01c879774efd84fd61961784040c340e95ec17e929d1c9caae4621d174d3a3483ad618247e8f92d054a9c91953af86c9e9688254e5771f3537de2d74df3b462cfe8726d438d408a041496d85f2047a61f0014f7d50a62498557a73ccadbbe4066af49954ba43cc473edcd9cbea01af3adc2ef8db4a9b6f3ad90cd80ce38377735130dfc3231f7ef09cbc78aa244efff3dbe15a0dda70237a44ccc34d6de0a8be249e9873ad621165b2f050c6c0c203901f28b8b5d8046fcf832cf58c4d984a774c9e47624d1a224fda288d368cfbc8e671d2679d6dc5153f037a872c8281f70059dddd5e7eb4125baf507ebf00cf1249b914972d762cfda8690803bbe7c3b2d726a12fe11384b7a53afc0d6d42ada89ba64cf3f735d65cd1f0fd54e898f851ec1529fbce6eff79a652823a161fffdc7b65edbcefe3c7da2a02e4896c5a0b05d0ea1e3f206e37dadf3814bff0204ae0597361f7185faa50c2a0016e2dc67fc5dd61ea5186c7217d8b171d2c45f0bfc700dec6a46929bdf0864f8b6841669a7c57002df3ff213cf7871115f66d4818c6cd2cb9dbab16952b8cebce27b363db4f25b4ec4ec61a4f47ce2f7834362d77809c3243c6d2bbf1abf06530811fa825b73a1ae0821bb7fb2cbe11ab8f0c34cbee8070f0f95fa7ab49e6e2d01155afc5f43cbc6591def0ccc07da7751078717c1cd5ab1608f1802523c1224d795d984bd7afdcb7bb523771468275f8f718b29ee8ea7cf24ca1384e8b77c05fb63bd45c6579ea5c57e016cf4d658109d49c862c0ee2c9c46940699413ff1d9ef0b5106253920e290a8a817e64c1164a81cc970e6dc82b5c1815e03c00a57914297e4c1b37f211ece93615d4a7c258c785723a0a8e6bc989d37b6890ec1bd138ee911993f7f1e6e6fb12e8bc9e55200894cbf0ed5455bf9272d97640723f554e9ad5989e35c554439e148f2f456cd6594419b7de4d3f2704699f7c3ed7ad48a344d1e2017dfb80cb9881267838eadd3efc6b114750936903bbdca7273605cae9a8629fac4f3fb140c41c7f16abe6935b8a4594afb9d02e06636c4f1447154a6ab27e591a3a31643389b663918ae6c173043a2fabdbe6d8957d8366a740c9af6b7534a0fd063588c45499bb5a8e55a05d963327ad42e74c51e9b5a52c0e40e01826571e7d3c58c0a722e8048befc34f9c5df18432bc1cb6954670a78f16ddc92a06698049e594694b3d2b9a97e13ba186817c2be4a6de3f05d41f1c62b698bfbda02e6a8be69385b548327ad2374eae0b5f0e90e61f6def93c6eedac2e69139b974fec6f6ce4e73feb2e111411faa54153ebb1078f7a9374b6bedceefe1e56e44771a998dbbbf29788b30c0e9c9feba64f93591a9124cb23524c23f170e8876458063059dae60c15d02ed09aeae472bb146f08b56696bf99cebeab19aa397a4cb0eee20d3c57ecc6cdc8dbb96e2669d7e90eff5e9b66c853b1645a81f91f0175282ac5fe6d5f6d75aa1358e936552753e77a9f08f7d773672240c3505316135b1a345f92be9ff4cee20ea8275a9a5c5f09097d33b52d77ec9a8b30d285d0200b8f9f63d5bd298d471f78df1fe018cc6b032b8f879346286b5ec657a161fa19b57b265d8916e913a96e5faee69d84792945a364a797eb057ff05b1d69ec154dd9ec07f70e4881d96ea1e585d4f840cebbb760c0d34bee99a8c04a31d11f698ce8d838ac6487b0996108171c266a24aacf3b6a11517f975390cf3f3c1bd059b27a90602c999ab0923ad581d7ecd6c3e910b01715069e36df34436792d7bee0385b686ef9eb12bbdaf87a17b09f6f779e0f8d4c6cc6e12ec73260c48bc93442b19d25082e163d547282dbc4ccde0fa6f2f13cda3f3b08a3f0a8327585cc4a9203c2da107563fcf3ec7fa9e9322d0fbd4ccb00747e5b2fc0805b04a7ffec99ae400887ef9b20d7cb71b08800c54881f1e8514f329921942bb3e42055e2532c7b0f84bf4e3a60eaebd26eb4fa7cff87bcfff219ada131b78aae3244c9b16fcaac86fc8fb78b376d23f578ad70a3db66210e13b9044a23d013eb2dd6ac5d7742d5d26e214f655e2c91824d7b7af4afe5d981f5ff9bf7f7d26aa1f6a3f9de4790f62085d12213d0bab8f2a714f7ec5f8fbb3a686a796f8e8f78aacfa9c22e0656e95e805f9d8681eb8675ca62547ba4d163218c471a758866a53090b75705aebec65be68036e54781d4c650e56cd327681fe900317e23c03b0977c5cefeb53cc6960a4af76c33192115b9c0d6031070b0bd4e1832e2c6dcfabb8cbb3d5502dc678a09fcb9e282bbb31b874d23e0616e1302852a16864d36869f1f2314e381be678267107b1531068001a15df7783e18a854cef7ff5e5732375e53f5af784bcf169a181927793f5fd1ab599140edf10c09270b8f060dea4065e5109003dd4329ac862d9eb21cda084c5d5b0aa6b5cc3e900e40d69ab1d7f8a555fde114d21c55aafe8efd1b5d240de0e513105651df7ccc0920652935c9abbbc037e2023161d974dc94266f6288b70f68e64bb42e97274724a516e11f70d170852f361594269a0e5e4bfac4f47efd39ff0638a8d37e70d369969750918764dfd464968f2287a4811a9a79605e17bd70cd444c47a6eb8c00b0a7bb610d73d24f0149fc2769dace50e919b6862bced898d5b407d2eef572540599974926a864e97a4ee712afa995b0c4a0aa33459c8a8af921fbe7e1c291655a74a3ebbb503aaa71aad4d37d4489abac16a90874c2542624defcdee1a65b8d6266188ea6d46f1f51075d3840d98aba4a2f927ea12dc10cd6959991c826c41a94d87dd14c3e6e33ff427b608909f8b9a0930025d511c2e478c3b1dc90d2a311a9f1a8abbc8edc988f1858da07c0aa285206b01cb46d37cfb138e553a60dc7fb83f04d2ab98558cbfb96bcf812a5d9fc1993c766477e9c63f3d2aab009440b748f534b95bbeb5067dbf5a932871a0e66f3ef67b96461421cd17c788d7c81165fbb8205f2d0eca7361a9ded0f76ac41765f310758e88e5e58c5ccab50a20dac32717660d0fcb3347dc8666b5ed79db339b0eb19cd2e6d2a39b0cb3454e5d711b499c5d1295705d89302bfeffa9c1d882870a56b0f1ed4724f643180d7e3edf546f9c5488bce51bd0fb2df1c51e1be0de5975f20fa1061878ba69f2a3e99aeed8c40754519cbd8b4602cf9aa7d13878e4782a554920252bf70d45d3af49fa2b14c8897925e7c084920376d73292860e93e2ac31821ea1b6087f1205845cb13cad134e10cbd07f5d21ce0413cc397cfb94e2922a36a04c1d2b626063d72c55035e83df02e783d3f24f260d5e67dcd5fee09028d6ea8bac9cc367beb4cfb1103e7188759189d830f1c0354b47faaee56f6f3f4e1f2677a88fc101c66511ba79df3661b751227c9b9ffe387fce140773d1b0a7e6b3b544ff9ec3384010e3fdc47701dcf473cab55934cff9d465a56db8a582c4f13262f411476a5d74e0796e5291e39cf2b067982f02473986059eab2b23ddf5fb04b7359a7e992c4b9b10a465312127f2ea846a3754a02da8eb1dae72e5fb12deaa88ab65663ad8227e18b3fa4ece9bc25900fe33cfd301aa930b738284d5e6331a00621d02e6dfe334c54cf83ed4ca442"}, {0xfe, 0x3b, "b18e4f59991f55ce1400c75faeebc902a9b279d204e95cea4e26a6f3efa973f5d1f8a266c67bbe0ad57b3d15038aff249cb512b17650717197fbab"}, {0x0, 0x61, "5b4ed4c653bcbc2c391e3776cd0abbdfce3c3a0826b7b6517ae4420cabedd253f7a7d95f63c1809a0dfae2db59a6661df2b532adea8482b1ab5dca01f740a061c7292e339559ebae640c3601a00c98b01e7b16d3d7d8f2e913af5405f61ce84b91"}, {0xc2, 0x42, "269f7d6ad784ee07e148e93f44b1fcf85ee4af56bf8148278d25b2f8301888a7fa8dc2fe99fcd7b4ceaefbcd0ee297b1f8e3f977fe14ff908eea656c72217da9c8cc"}, {0x0, 0xae, "e4568c61629b8014a42e6f4723acbd6f57dfe0e14c1a852d12dd6984abc53d62207ee5e250b98df2480ce20e8a46e02b879f292ea25df6e58b78a36cf37a39f54268e3ca2f339606682d0b936d0d9c910bd3205b09283bd9d639af9b5a13cc2347971e527ca7199167878d601a2bf57dc2dcd7bf1078fd9ff670047a9c87ad116dbf897afde44b25b4f669d7fe285b1899ca587ec79cb07a49728cb439cc72bbc00cd6ddb3752a4599410336be24"}]}, @dstopts={0x3b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}], "31191a0ef340626599662fc88945c94426d407a6617f70f328e830c8095f9f4eb2a65a85b9be682dc0b5b26a13f4ee5239f2d3a537b838197037cc53e93a9b55659b2b943e416f74"}}}}}, 0x14c9) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000d2f000)=@sack_info={r7, 0xc22d, 0x80000001}, &(0x7f00004a4000)=0xc) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f00007d0000)={0x47, "db835a3f065ada5623fde5cfdcb5fe6188d7c5d399280f3b2e29a18c992b3f65da3f97a280263b9b981fa13262a0672b5de3f76ee5d1d160a689cc136f4eec82d3b0ebd747b3d0"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00005cd000-0x28)={0x1, 0x5, 0xfffffffffffffffb, 0x81, "2027a7d0d2dd286e56b6b7a9ca2c0d640065560148e16f4d2cea84d75a58348f"}) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000a9e000)={0x30d9, 0x1, 0x3}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000240000)={r11, 0xffffffffffffffc0}, 0x8) r12 = socket$inet6(0xa, 0x80002, 0x200000000000088) bind$inet6(r12, &(0x7f0000c9e000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) [ 206.002610] binder: 27106:27109 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xfffffffffffffffc, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x2, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f000059b000)=0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x806, 0x8) mmap(&(0x7f0000000000/0xed5000)=nil, 0xed5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigpending(&(0x7f00003b5000)={0x0}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x10000031, 0xffffffffffffffff, 0x0) r2 = gettid() move_pages(r2, 0x0, &(0x7f000082e000)=[], 0x0, &(0x7f000000d000)=[], 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000696000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f000000d000-0xc)="2f6465762f72666b696c6c00", 0x3fffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000007000-0x5c)={{0xa, 0x1, 0x10001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x83a}, {0xa, 0x1, 0x40, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffffffc}, 0x7, [0x9, 0x200, 0xfffffffffffffffc, 0x4, 0x10001, 0x935, 0xfffffffffffffffc, 0x1]}, 0x5c) [ 206.002619] binder: 27106:27109 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2017/11/28 18:58:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x19, 0x5, 0x71, &(0x7f0000895000)={0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000586000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 206.002630] binder: 27106:27109 BC_INCREFS_DONE u0000000000000000 no match [ 206.002640] binder: 27109 RLIMIT_NICE not set 2017/11/28 18:58:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r4, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r5 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r5, 0x4}, @increfs_done={0x40106308, r3, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:21 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) [ 206.031411] device gre0 entered promiscuous mode [ 206.033408] binder: 27106:27116 BC_INCREFS_DONE uffffffffffffffff no match [ 206.033428] binder: 27106:27116 got transaction to invalid handle [ 206.033443] binder: 27106:27116 transaction failed 29201/-22, size 40-16 line 2755 [ 206.036433] binder: 27106:27116 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 206.036448] binder: 27106:27116 BC_ACQUIRE_DONE u0000000020000000 no match [ 206.036463] binder: 27106:27116 BC_INCREFS_DONE u0000000000000000 node 794 cookie mismatch 0000000000200001 != 0000000000000000 [ 206.037372] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.041568] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.043687] binder: 27126:27130 got reply transaction with no transaction stack [ 206.043697] binder: 27126:27130 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 206.045678] binder: 27126:27130 transaction failed 29189/-22, size 0-0 line 2755 [ 206.047920] binder: 27106:27116 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 206.047933] binder: 27106:27116 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 206.047949] binder: 27106:27116 BC_INCREFS_DONE u0000000000000000 no match [ 206.047959] binder: 27116 RLIMIT_NICE not set [ 206.051216] binder: BINDER_SET_CONTEXT_MGR already set [ 206.051225] binder: 27106:27109 ioctl 40046207 0 returned -16 [ 206.052484] binder: 27106:27109 BC_INCREFS_DONE uffffffffffffffff no match [ 206.052494] binder: 27106:27109 got transaction to invalid handle [ 206.052506] binder: 27106:27109 transaction failed 29201/-22, size 40-16 line 2755 [ 206.054646] binder: 27106:27109 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 206.054658] binder: 27106:27109 BC_ACQUIRE_DONE u0000000020000000 no match [ 206.054670] binder: 27106:27109 BC_INCREFS_DONE u0000000000000000 no match [ 206.076739] binder: undelivered TRANSACTION_COMPLETE [ 206.076951] binder: undelivered TRANSACTION_COMPLETE [ 206.076965] binder: undelivered transaction 802 [ 206.100379] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.134509] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.145005] binder: 27141:27144 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 206.145050] binder: 27141:27144 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 206.145065] binder: 27141:27144 BC_INCREFS_DONE u0000000000000000 no match [ 206.145077] binder: 27144 RLIMIT_NICE not set [ 206.170359] binder: 27141:27148 BC_INCREFS_DONE uffffffffffffffff no match [ 206.170373] binder: 27141:27148 got transaction to invalid handle [ 206.170384] binder: 27141:27148 transaction failed 29201/-22, size 40-16 line 2755 [ 206.173215] binder: 27141:27148 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 206.173227] binder: 27141:27148 BC_ACQUIRE_DONE u0000000020000000 no match [ 206.173240] binder: 27141:27148 BC_INCREFS_DONE u0000000000000000 node 803 cookie mismatch 0000000000200001 != 0000000000000000 [ 206.177046] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.182366] binder: 27141:27148 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 206.182377] binder: 27141:27148 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 206.182389] binder: 27141:27148 BC_INCREFS_DONE u0000000000000000 no match [ 206.182399] binder: 27148 RLIMIT_NICE not set [ 206.183591] binder: BINDER_SET_CONTEXT_MGR already set [ 206.183602] binder: 27141:27144 ioctl 40046207 0 returned -16 [ 206.184895] binder: 27141:27144 BC_INCREFS_DONE uffffffffffffffff no match [ 206.184905] binder: 27141:27144 got transaction to invalid handle [ 206.184916] binder: 27141:27144 transaction failed 29201/-22, size 40-16 line 2755 [ 206.186183] binder: 27141:27144 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 206.186198] binder: 27141:27144 BC_ACQUIRE_DONE u0000000020000000 no match [ 206.186211] binder: 27141:27144 BC_INCREFS_DONE u0000000000000000 no match [ 206.201289] binder: undelivered TRANSACTION_COMPLETE [ 206.211326] binder: undelivered TRANSACTION_COMPLETE [ 206.211338] binder: undelivered transaction 809 [ 206.241592] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.246191] binder: 27171:27172 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 206.246202] binder: 27171:27172 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 206.246218] binder: 27171:27172 BC_INCREFS_DONE u0000000000000000 no match [ 206.246228] binder: 27172 RLIMIT_NICE not set [ 206.288391] binder: 27171:27180 BC_INCREFS_DONE uffffffffffffffff no match [ 206.288416] binder: 27171:27180 got transaction to invalid handle [ 206.288429] binder: 27171:27180 transaction failed 29201/-22, size 40-16 line 2755 [ 206.291390] binder: 27171:27180 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 206.291407] binder: 27171:27180 BC_ACQUIRE_DONE u0000000020000000 no match [ 206.291419] binder: 27171:27180 BC_INCREFS_DONE u0000000000000000 node 810 cookie mismatch 0000000000200001 != 0000000000000000 [ 206.304968] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.324347] binder: BINDER_SET_CONTEXT_MGR already set 2017/11/28 18:58:22 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x2, 0xcf, &(0x7f0000001000-0x8)={0x0, 0x0}) finit_module(r0, &(0x7f0000b64000-0x27)="6e6f6465766367726f7570707070305b24707070316e6f6465765d75736572276d643573756d00", 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000f37000)={&(0x7f00000d1000)="2e2f66696c653000", 0x0}, 0xc) 2017/11/28 18:58:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000259000-0xd)="2f6465762f7573626d6f6e2300", 0x6, 0x22400) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000dc7000)={0x0, @in6={{0xa, 0x3, 0x10000, @loopback={0x0, 0x1}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x3, 0x9, 0x1ff, 0x4}, &(0x7f0000666000)=0xa0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00004b3000-0x8c)={r2, @in6={{0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006d4000)="2f6465762f72666b696c6c00", 0x86300, 0x0) accept4$llc(r3, &(0x7f00001ba000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000678000-0x4)=0x10, 0x800) 2017/11/28 18:58:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$mice(&(0x7f00004fd000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000d55000)={0x0, 0x0}, 0x2) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000bb3000)={0x0, 0x0, 0x0, 0x4e, 0x3, 0x0, 0x9, 0x10, 0x14, "24490b79e6fe4c5b540a481d5691bd80e7afa713dad62db15e83c5824ecfe274f5562a7074b1854659519f70baa53b6f862f9124877dac55b2230512a127b9f3", "1d5bd4332f7383acbc2c6098a80814ca8324820a751b4a9361fd6370deb4f7ab42bc4741a36df48d5d7f605bc0685e68aa3f719e95a73ad0e6fb75376d91b984", "95f4224520ced1101051f277a929080264841f7b2ab26518167a10fc148d3281", [0x100, 0x7fffffff]}) ioctl$KVM_SMI(r2, 0xaeb7) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r3, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r4 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r4, 0x4}, @increfs_done={0x40106308, r2, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:22 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r3 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r4 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f000000c000)={r4, 0x0, 0x0, 0x0}) r5 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000eea000-0x8)=0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) ioctl$TIOCGSID(r5, 0x540f, &(0x7f00007e1000-0x4)=0x0) 2017/11/28 18:58:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000e19000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpgrp(0xffffffffffffffff) wait4(r3, 0x0, 0x2, &(0x7f0000336000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00003d3000)=0x0, &(0x7f00000da000-0x4)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00009e7000)="2e2f66696c653000", 0x100, 0x46) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000e4000-0x4c)={0x80000001, 0x6, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/11/28 18:58:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000007000-0x11)="2f6465762f7161745f6164665f63746c00", 0x40, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf71000)=nil, 0xf71000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000fc7000)=0x5, 0x4) mmap(&(0x7f0000f71000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000f72000-0xa)="70726f635d7070703100", 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000ec3000)="2f6465762f6877726e6700", 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f0000abf000)=0x7fffffff, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000a79000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x8000}) r4 = memfd_create(&(0x7f00006a3000)="65746831766d6e657431757365723a00", 0x3) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000803000)=0x0) mmap(&(0x7f0000f71000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f000073b000)="2e2f66696c653000", &(0x7f00008ee000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000f72000-0x4)=0x80000000) sendto$inet6(r1, &(0x7f0000426000)="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", 0x599, 0x0, &(0x7f0000aed000)={0xa, 0x0, 0x8, @loopback={0x0, 0x1}, 0x0}, 0x1c) recvfrom$inet6(r1, &(0x7f0000bfc000)="", 0x0, 0x2041, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x805, 0x4000000003, &(0x7f0000c07000)={0x0, 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x400000023, &(0x7f0000487000)={@empty=0x0, @rand_addr=0x0, 0x0}, &(0x7f0000de5000-0x4)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000f06000-0xc0)="18000000020001000000be8c5ee18c003e000008020100ec01da1e03366f3cdc0200000074fffffff76052bb6a88001b0200000000000000ffffffe66d98e2010067fc3763e0209cee4a5acb3da41f0000ba00000000c88ebbff060100000b01000000b121cf140900000000000000ec007702cfb7ebe7ec7ee87cccfff6ba000000024f7c98e9e9f15406aa0100050000040108000006c191a2ffe3c5632c1adb8a335bd7b2d17fdea21b38100000000000000000041ad0b4d2c200efff01b6", 0xc0) getsockopt$inet_opts(r4, 0x0, 0x200009, &(0x7f0000364000-0x80)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000f6d000)=0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f000022f000)={0x0, 0x9}, &(0x7f0000c2a000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000e03000-0x98)={r8, @in={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1000000000058, 0x3}, &(0x7f0000ede000-0x4)=0x98) 2017/11/28 18:58:22 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0x0, 0x806, 0x2000380000000000) [ 206.324357] binder: 27171:27180 ioctl 40046207 0 returned -16 [ 206.324423] binder: 27171:27172 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 206.324436] binder: 27171:27172 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 206.324453] binder: 27171:27172 BC_INCREFS_DONE u0000000000000000 no match [ 206.324465] binder: 27172 RLIMIT_NICE not set [ 206.334104] binder: undelivered TRANSACTION_COMPLETE [ 206.855140] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.864489] QAT: Invalid ioctl 2017/11/28 18:58:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f000057d000-0x20)={@generic="cf09394ebc8684e1a8774b38452b8191", @ifru_flags=0x1101}) 2017/11/28 18:58:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000052e000-0xc)="2f6465762f72666b696c6c00", 0x8000, 0x0) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000e92000)=0x1, 0x4) r1 = syz_open_dev$mice(&(0x7f0000d40000)="2f6465762f696e7075742f6d69636500", 0x0, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f0000e3b000-0x2)=0x61c) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000212000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000001d000)=0xb) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f000060c000)=0x0) fstat(r1, &(0x7f0000d7e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_thread_area(&(0x7f00009c2000-0x10)={0x5, 0xffffffff, 0x3000, 0x2, 0x5, 0x4, 0x0, 0x401, 0xe0, 0xa23b}) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000a75000-0x1)=0x3) [ 206.918502] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 206.923925] binder: 27204:27230 got reply transaction with no transaction stack 2017/11/28 18:58:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000c1c000)="2f6465762f766373612300", 0x7, 0x400) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000994000-0x1)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) syz_open_dev$mice(&(0x7f000076e000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20000) [ 206.923934] binder: 27204:27230 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 206.926468] binder: 27204:27230 transaction failed 29189/-22, size 0-0 line 2755 [ 206.942325] binder: 27202:27216 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 206.942340] binder: 27202:27216 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 206.942359] binder: 27202:27216 BC_INCREFS_DONE u0000000000000000 no match 2017/11/28 18:58:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000a29000)=[], 0x0) 2017/11/28 18:58:22 executing program 7: mmap(&(0x7f0000000000/0xf67000)=nil, 0xf67000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000f66000)=0xde, 0x4) mmap(&(0x7f0000f67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000f69000-0xc)="2f6465762f72666b696c6c00", 0x40400, 0x0) pause() ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) mmap(&(0x7f0000f68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f68000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000f68000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f68000)=0xb) r2 = syz_open_dev$sndtimer(&(0x7f0000f67000)="2f6465762f736e642f74696d657200", 0x0, 0x400) mmap(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000f69000)="81257b2aefe47e2238e1b36fc82fd5124c5349ad8dcbc102e399fa8b4a83027cde96d9c8e1f6e10f1faccd4948", 0x2d, 0x4048000, &(0x7f0000f69000)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 2017/11/28 18:58:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x80000) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000684000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000342000)=0x10, 0x80000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000d74000)=0x100000001, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00009f5000-0x9)="2f6465762f72746300", 0x2040, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f000006a000)={0x0, @in6={{0xa, 0x2, 0x9ebb, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, 0x8}, &(0x7f000070d000-0x4)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00004ea000-0x8)=@assoc_value={r3, 0x1f}, &(0x7f0000acf000)=0x8) futex(&(0x7f000000d000-0x4)=0xe0000, 0xd, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x3) 2017/11/28 18:58:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000cb000-0xa)="2f6465762f6375736500", 0x464402, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, &(0x7f00001b4000)=0x100000000) perf_event_open(&(0x7f00005e2000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000ff4000-0x8)="2e2f66696c653000", 0x10000, 0x2) bind$bt_rfcomm(r1, &(0x7f000096f000-0x9)={0x1f, {0x7, 0x80, 0x200, 0x6, 0x3, 0x2}, 0x8}, 0x9) r2 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00005b5000+0xf11)=[@in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000ef5000-0x8)={0x0, 0x7592}, &(0x7f0000c55000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00008cc000-0xc)={r6, 0xa8, &(0x7f00003c1000-0xa8)=[@in6={0xa, 0x2, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, @in6={0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0x1}, @in6={0xa, 0x3, 0x7, @loopback={0x0, 0x1}, 0x6}, @in6={0xa, 0x0, 0x20, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, @in6={0xa, 0x0, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7}, @in6={0xa, 0x0, 0xbdcb, @loopback={0x0, 0x1}, 0xdf1}]}, &(0x7f00005df000)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00001c8000)=@assoc_value={r7, 0x7ff}, 0x8) bind$inet6(r2, &(0x7f00008bb000)={0xa, 0x2, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00005a8000-0x8)=0x80000001) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f000044b000)=0x6914, 0x4) [ 206.942371] binder: 27216 RLIMIT_NICE not set [ 206.942910] binder: 27202:27216 BC_INCREFS_DONE uffffffffffffffff no match [ 206.942947] binder: 27202:27216 got transaction to invalid handle 2017/11/28 18:58:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:22 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x0, 0x2000380000000000) 2017/11/28 18:58:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) r1 = open(&(0x7f0000a1f000)="2e2f66696c653000", 0x420204, 0x101) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000667000-0x4)=0x3, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000240000-0x59)={0x0, 0x7a, "f655b22b4ad0cdaa708292cda111ce33a48d3ae7d4b1ae49ef67f5858e88c157872a12855c2a956cbd5d73e1bd774ece2bd3824b0c1a9b98b4c4845530053bb51149d8c855172a9d41015f4ebf566d2a1e756d29b0b557b25332e1f923a9efb01c46a3c0a1e45bb016196c9f9e277ba99fd884500d585fc968df"}, &(0x7f0000be9000-0x3)=0x82) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000bef000-0x4)=0x0) getpeername$inet6(r1, &(0x7f00002fb000-0x1c)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000496000)=0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00001a1000)={r2, 0x9}, &(0x7f0000383000)=0x8) syz_extract_tcp_res(&(0x7f0000f80000)={0x0, 0x0}, 0x3, 0x2) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000df3000)={&(0x7f00001da000/0x2000)=nil, 0x3, 0x4, 0x5, &(0x7f00002a0000/0x4000)=nil, 0x0}) [ 206.942958] binder: 27202:27216 transaction failed 29201/-22, size 40-16 line 2755 [ 206.943868] binder: 27202:27216 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 206.943882] binder: 27202:27216 BC_ACQUIRE_DONE u0000000020000000 no match [ 206.943898] binder: 27202:27216 BC_INCREFS_DONE u0000000000000000 node 816 cookie mismatch 0000000000200001 != 0000000000000000 2017/11/28 18:58:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x9, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000b0c000)={0x0, 0xb0, "a4f729dbb6baf3468acd8fb84c900af8e90818ced726eb23852b9b858e59201e07f24a8da01fb383f648fc73b7f500048c8e4115c5893e8c87781d1aa3e120517b1e026970db3bb4abfbe4215f7d442dc6ad049c3616dab28520f330d1a4833c0b0117316b81dfb03eff6b8e2676e712450ea274f55b8c07caa73326d8eb597790174a8db3aeb3962898ba9b5c62a2fb0736a7f7cb54412d38fbdb0212ca97bcb7059d11d203073b91f730492d56d3c6"}, &(0x7f00001e6000)=0xb8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000e12000-0x14)={r4, 0x7, 0x1, 0x3, 0x3f, 0x80}, &(0x7f0000d6c000)=0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) fdatasync(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$ax25(0x3, 0x7, 0xc3, &(0x7f0000d21000-0x8)={0x0, 0x0}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00007ef000-0x10)=@common="62637366300000000000000000000000") r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c6a000)="2f6465762f73657175656e6365723200", 0x101000, 0x0) inotify_add_watch(r6, &(0x7f0000674000-0x8)="2e2f66696c653000", 0x109) r7 = accept4$ax25(r5, &(0x7f0000e63000)={0x0, {"00000000000000"}, 0x0}, &(0x7f00003cb000)=0x10, 0x807fc) ioctl$sock_proto_private(r7, 0x89e9, &(0x7f0000a2f000-0xae)="f4706a6f401624fa9cadc3c38e099591c8abb3d5e6464547da40ec0ada9d64b313d4061c8d858c530648e7c4261883e64c0896ea12bd98d4cec94f466ac8998df207a0225e5fe859937d90198a5aad52ed78eb1b07215fb9018cfce7d720e24dce20b7977a332acb036b357f67fd0ca66fe6cbc870401906f181a353e2c7b821f02b29e1d775e3ed714284b1ab856f1d28aae88b69a18eba52817d96a851a1237b7d1f4d18c8a144d1848202cb40") syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 206.946679] QAT: Invalid ioctl [ 207.154060] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.187296] binder: undelivered TRANSACTION_ERROR: 29189 2017/11/28 18:58:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r3, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r4 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r4, 0x4}, @increfs_done={0x40106308, r2, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:22 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8000000000006, 0x4, 0x22, 0x7, 0x0, 0x0, 0x0}, 0x1c) r2 = open(&(0x7f00005e6000)="2e2f66696c653000", 0x404041, 0x10) r3 = add_key$keyring(&(0x7f00006d4000-0x8)="6b657972696e6700", &(0x7f00006b5000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000f4c000)={{0x3, 0x10001}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x10, 0x191841, 0x8f54, 0xff, 0x8, 0x33d, 0x2, 0x0, 0x1, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000e72000-0x20)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7, 0x1, 0xff, 0x5, 0xe, 0x8, 0x7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000028000)={r1, &(0x7f000000b000-0xb5)="", &(0x7f00004ab000-0x1)="", 0x0}, 0x20) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r4, 0x0) sched_yield() socket$inet6(0xa, 0x3, 0x400000000000003f) r5 = socket$inet6_sctp(0xa, 0x800000000001, 0x84) listen(r5, 0x401) r6 = socket$inet(0x2, 0x1, 0x0) r7 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xa) bind$netlink(0xffffffffffffffff, &(0x7f0000395000)={0x10010000, 0x0, 0x1, 0x518}, 0xc) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) fcntl$setstatus(r4, 0x4, 0x4000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f000026d000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000936000)="") write$tun(r8, &(0x7f0000a53000-0x104a)=@hdr={0x1, 0x0, 0x0, 0x0, 0x81, 0x0, @ipv6={0x0, 0x6, "85b7e3", 0x8f, 0x84, 0xfffffffffffffffc, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[], @dccp={{0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3f, "f7b877", 0x1, "0ccc48"}, "78e8eb46d5db333e19f61ef6cd09cb72ebc7eca138cc75d74c3b4ec6ba8d9d4337bfdab3cd47a2d5ead8fc702f685c8b0da401bfedf4d8a3fcefa7f46094ba62e7b07e31c7c2a9bb657bd8d10b91b0c4531a24a4c2fc3577949468d08574a2de479f2d2c4be406eab65793d9c67f20fc43d3a7c3970a1a212f2d61a9e744a5"}}}}, 0xc1) 2017/11/28 18:58:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) syz_open_dev$tun(&(0x7f0000a3b000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x40000) 2017/11/28 18:58:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) flistxattr(r0, &(0x7f0000469000-0x86)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x86) writev(r0, &(0x7f0000b5b000)=[{&(0x7f000064d000)="a40ffb05bb58a5122905c45d985492af576bde941e67c7492d083c8334f61f6dd2476acd4e32d90589c0fac463274d9c7b2a6536c7dfd5b4a5cc0d2a9ad88ee7ef9c8be1ea8ceeee38d701926af050e85a73a52437611f39c002f21f597bb3447ecfd0b2eb6081f1571d43fb95f9acf6e992c5ba", 0x74}, {&(0x7f0000034000-0x5f)="89f50ffdd6fcd3d63c24e696cd04c3137f7c47ee50bb072809fdd88d6cf16d95e6a108830930a6339e78d2edf43af89c239590337f0599e3b14cff4d4256ce8a532ab9aa1199a92d552d2bcc2d78a3a46ecb938da7e7f55506097d57cc2a58", 0x5f}, {&(0x7f0000348000-0x9e)="f2ea1ecdc4c660071645387130db2197c4a0ae3b2073f57acb025550207f2073c00a3a5e99dc8c1b94fc635c052e8bd73576ee9a65ae30062973bd9a88572a3a6561e2fbf9187cf21875931d703108c27fe1c459727c53aa5d6f72471e6ea6219e9c6ba6fee781d3fa714c5a919280cadec99d01e563a93fa3198c7ad861e02946bd1378e9124de81676eb1434d4197d24a2f59b1573738c45dca16d36b0", 0x9e}, {&(0x7f0000cc4000)="6a4a0b76aa69fdc7685769581d5df7fa37f8cee43cf26b1de6efec8e077ee81a4703abb2f33a2540eb0f8f4635135eb2e53d285c43f9d563090b841280c589091145665f3a6de6ddd96a2b8e18d87addcbd9c49761097fda5dfcaffd059f4c61b85eac320dd0a7e03c1bce445cc96f0d36fa58caa6a6b3878d567c02b32cadc79310da877be568b38a", 0x89}, {&(0x7f000027b000-0x73)="dc43297ffce51af469b2b55d3be96f02b6c1b0c52c9b6cee4e5fcb903c5789a6ae3fdc96b7799994535d7168a9e14b006a2740bdc21f4ccff864633ff103d9e6302db2fe59f4303e81ce3010f5843f82d99806a1bc4f51cd1f50d771b573d99d29f10d077a1532447f279769ca38eaf6ea5f68", 0x73}, {&(0x7f00002f4000)="9c3299d8e8d09c5305bf322ae02b4f360af2022ff7400df982dc2184bdd275c96caf50e03c7661f18e3e7f65caebb43d185f458a428bb4e32e64d09ea94e9a16195f9e0531086a584ec37a9770939af6dcecd6402861ef159fc462a6c85b7589fc224c4d6a042da84a3946ca9e9fa2b648e8c025feea8f67e7df23ee92c343ca4917c0d6829c97ddf9c6e05230560538926d35e95f1d80c80a6ff5ac74", 0x9d}, {&(0x7f00006af000-0x46)="430422dfc509c03e079157f483fbc7515b2f2e41a77472053c9dcdbfd206833993006d82f93c8a9a36388e21a11f18e484b2b20e1445ca093f19edf0949a87fdbce82bfa2e1d", 0x46}, {&(0x7f0000ad8000)="0e67a7a701ab1bd4bc99220a89f9938ac561ef59a02b4a19af505cdbbb0e04bc0416bb0ad9ba76843c4351ec4005245278aac79c72cd0ec1dd0edfe6856028d65fefa2ce907a26f98adadaa08b687c41d6c972ed79c2aee5814ff8a2d85de386f0084dc9f9d22559a8f4c399cef141da90625f33562e5e8659e94c979246e3bbc6936fec0eda54e8ed47f04ee5f8bed8c5e3a25878065a1249424d250880328c98a7d3559cd2564826a0ef3f2d408d9d3ce211fd99c30138975e94e3338d0e7d0899c0", 0xc3}, {&(0x7f0000163000-0xc1)="2b26c11eea399e279c6437e3209f8bf8b1b5aa6d5d074474735993dab595b39a2fc0cf9a75bdb3748a55aaf0aaf70625eb576e49052434e2594750e438a6582db1efcd0373d213d4116e3337e45934c282fb76b9c1039328de22d3580382774a84d6901a9edb5ad3b4687afafcdd945db569f65045343663d447dbd892f60d909b761580a3d5b2f5f6afc613830354c4237be7e11ba09ac0c1fe60dbb8b1ada5cfe0b85c4824eeb2238d3be7a1e1a3c1adaeb3f5c3af1d91109b5461634d6f6c80", 0xc1}], 0x9) getpeername$netlink(r0, &(0x7f0000440000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000b6b000)=0xc) 2017/11/28 18:58:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) [ 207.196339] binder: undelivered TRANSACTION_COMPLETE [ 207.205713] binder: undelivered transaction 819 [ 207.255982] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.282711] device gre0 entered promiscuous mode [ 207.290087] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) [ 207.306606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22715 sclass=netlink_route_socket pig=27306 comm=syz-executor5 2017/11/28 18:58:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r4, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r5 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r5, 0x4}, @increfs_done={0x40106308, r3, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) dup(r0) 2017/11/28 18:58:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pivot_root(&(0x7f0000ace000)="2e2f66696c653000", &(0x7f0000451000)="2e2f66696c653000") syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00005e5000)="2f6465762f6877726e6700", 0x800, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000dd7000-0x60)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") [ 207.363287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22715 sclass=netlink_route_socket pig=27306 comm=syz-executor5 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:23 executing program 6: open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x0) 2017/11/28 18:58:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00005be000)="2f6465762f7161745f6164665f63746c00", 0x81, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 207.407256] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.420607] binder: 27330:27334 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 207.420620] binder: 27330:27334 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 207.420635] binder: 27330:27334 BC_INCREFS_DONE u0000000000000000 no match 2017/11/28 18:58:23 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000102000)=0x401, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f00004ef000)="2f6465762f62696e6465722300", 0x0, 0x802) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000b08000)={0x401, 0x4}) r4 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) setsockopt(r4, 0xcd64, 0x400000000000, &(0x7f00006e5000-0xf6)="061e9140346478e5590f96f2d71fcbfd214b522f210fcba06d682817200fc32fdb0664b9a1cf525bdacb576f0167d2837314f87e95bb84ec8a560932921b4e54b97b7756a838d57e9fb6a9278b076e2ac7aad3ed65ba21620fb403b300220d0a6ac70878b39a66249f48a716fff7098ca1f411ec2873c78a4a0c3099b019de735596499d1854d7eb6046488a0ca4afc1c8105e1d0358e6075ebc4ce99491e3da6e09f7b1be0e0df88e830e5aafe024714e7dced7dad083b4534f6620b1b0720eaf8ed6a726c77c16bd85cbf50052c0d89f091908119aa04ab6ccfb5fb8c80c80fd9691adc2b01d7280273688b2751037c63ce8691db5", 0xf6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f000027d000)=0x1) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 207.420646] binder: 27334 RLIMIT_NICE not set 2017/11/28 18:58:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r4, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r2, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r5 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r5, 0x4}, @increfs_done={0x40106308, r3, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:23 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r0) keyctl$assume_authority(0x10, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={r2, 0x0, 0x0, 0x0}) r3 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0xc, 0x0, &(0x7f0000006000-0x2c)=[@dead_binder_done={0x40086310, 0x4}], 0x0, 0x0, &(0x7f0000002000)=""}) connect$unix(r3, &(0x7f0000891000)=@abs={0x1, 0x0, 0x1}, 0x8) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a8f000-0x14)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000694000)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000d0b000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000eff000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000a68000)={{{@in=@broadcast=0xffffffff, @in=@multicast2=0xe0000002, 0x0, 0x8, 0x0, 0xc2, 0x1d, 0xa0, 0x20, 0xf40000000000000, r4, r5}, {0x101, 0xff, 0xfffffffffffffffb, 0x3ff, 0xda4, 0x3, 0x8, 0x3}, {0x63, 0x556, 0x7277, 0x101}, 0x4, 0x101, 0x8f, 0x0, 0x80, 0x3}, {{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xe4, 0x1}, 0x4, @in=@empty=0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x7, 0x6}}, 0xe8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 207.455303] binder: 27330:27343 BC_INCREFS_DONE uffffffffffffffff no match [ 207.455314] binder: 27330:27343 got transaction to invalid handle 2017/11/28 18:58:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) [ 207.455323] binder: 27330:27343 transaction failed 29201/-22, size 40-16 line 2755 [ 207.457982] binder: 27330:27343 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 207.457992] binder: 27330:27343 BC_ACQUIRE_DONE u0000000020000000 no match [ 207.458007] binder: 27330:27343 BC_INCREFS_DONE u0000000000000000 node 820 cookie mismatch 0000000000200001 != 0000000000000000 [ 207.472925] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.479965] binder: 27330:27343 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 207.479976] binder: 27330:27343 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 207.479989] binder: 27330:27343 BC_INCREFS_DONE u0000000000000000 no match [ 207.479998] binder: 27343 RLIMIT_NICE not set [ 207.482422] binder: BINDER_SET_CONTEXT_MGR already set [ 207.482433] binder: 27330:27334 ioctl 40046207 0 returned -16 [ 207.483763] binder: 27330:27334 BC_INCREFS_DONE uffffffffffffffff no match [ 207.483774] binder: 27330:27334 got transaction to invalid handle [ 207.483785] binder: 27330:27334 transaction failed 29201/-22, size 40-16 line 2755 [ 207.485383] binder: 27330:27334 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 207.485397] binder: 27330:27334 BC_ACQUIRE_DONE u0000000020000000 no match [ 207.485409] binder: 27330:27334 BC_INCREFS_DONE u0000000000000000 no match [ 207.493546] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.500721] binder: undelivered TRANSACTION_COMPLETE [ 207.500912] binder: undelivered TRANSACTION_COMPLETE [ 207.500926] binder: undelivered transaction 826 [ 207.509337] binder: 27352:27354 got reply transaction with no transaction stack [ 207.509347] binder: 27352:27354 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 207.510552] binder: 27352:27354 transaction failed 29189/-22, size 0-0 line 2755 [ 207.545672] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.546965] binder: undelivered TRANSACTION_ERROR: 29189 [ 207.550703] binder: 27362:27366 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 207.550715] binder: 27362:27366 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 207.550731] binder: 27362:27366 BC_INCREFS_DONE u0000000000000000 no match [ 207.550742] binder: 27366 RLIMIT_NICE not set [ 207.579339] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.583528] binder: 27362:27379 BC_INCREFS_DONE uffffffffffffffff no match [ 207.583566] binder: 27362:27379 got transaction to invalid handle [ 207.583576] binder: 27362:27379 transaction failed 29201/-22, size 40-16 line 2755 [ 207.584280] binder: 27373:27376 got reply transaction with no transaction stack [ 207.584292] binder: 27373:27376 transaction failed 29201/-71, size 2-1886661253 line 2670 [ 207.586407] binder: 27362:27379 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 207.586420] binder: 27362:27379 BC_ACQUIRE_DONE u0000000020000000 no match [ 207.586433] binder: 27362:27379 BC_INCREFS_DONE u0000000000000000 node 829 cookie mismatch 0000000000200001 != 0000000000000000 [ 207.587372] binder: 27373:27376 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 207.587386] binder: 27373:27376 BC_ACQUIRE_DONE u0000000000000000 no match [ 207.587398] binder: 27373:27376 BC_INCREFS_DONE u0000000000000000 no match [ 207.587411] binder: 27376 RLIMIT_NICE not set [ 207.589825] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 207.594365] binder: 27362:27366 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 207.594378] binder: 27362:27366 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 207.594396] binder: 27362:27366 BC_INCREFS_DONE u0000000000000000 no match [ 207.594407] binder: 27366 RLIMIT_NICE not set [ 207.594439] binder: BINDER_SET_CONTEXT_MGR already set [ 207.594447] binder: 27362:27379 ioctl 40046207 0 returned -16 [ 207.607515] binder: undelivered TRANSACTION_COMPLETE 2017/11/28 18:58:23 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0x6, 0x800) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000025000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2017/11/28 18:58:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) fremovexattr(r0, &(0x7f000064d000)=@known="73797374656d2e706f7369785f61636c5f61636365737300") ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:23 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x8000000000302, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00003d6000)=@generic={0x5a7340ef, 0x9, 0x9}) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000077b000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:23 executing program 6 (fault-call:7 fault-nth:0): open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) socketpair(0x4, 0x5, 0x80, &(0x7f0000576000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000e4f000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000891000)={r2, 0x2}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000174000)={0x4, &(0x7f0000996000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 2017/11/28 18:58:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r3, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r4 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r4, 0x4}, @increfs_done={0x40106308, r2, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) [ 207.617574] binder: 27373:27383 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 207.617598] binder: 27373:27383 BC_FREE_BUFFER u0000000000000000 no match [ 207.617616] binder: 27373:27383 got reply transaction with no transaction stack [ 207.617637] binder: 27373:27383 transaction failed 29201/-71, size 0-8 line 2670 [ 207.682507] binder: undelivered TRANSACTION_ERROR: 29201 2017/11/28 18:58:23 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="7472757374656400", 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000001000-0x10)={{r1, r2+30000000}, {0x0, 0x0}}, &(0x7f0000001000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000001000-0x2)={0x7, 0x8216}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) [ 208.035254] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00009db000-0x5c)={{0xa, 0x0, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, {0xa, 0x0, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xd2d}, 0xffffffffffffffc1, [0x800000000, 0x3, 0x5, 0x4, 0x8, 0xffffffff, 0x7fffffff, 0x5]}, 0x5c) openat$autofs(0xffffffffffffff9c, &(0x7f00007c8000-0xc)="2f6465762f6175746f667300", 0x1, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 208.075600] binder: 27392:27400 got reply transaction with no transaction stack [ 208.098249] binder: 27392:27400 transaction failed 29201/-71, size 2-1886661253 line 2670 2017/11/28 18:58:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb91, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000055c000)="2e2f66696c653000", 0x200080, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f0000efc000)={{0x3, 0x6df}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x15, 0x190400, 0x9, 0x9, 0x4c77, 0x9, 0x8, 0x0, 0x3, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 208.098322] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r3, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r4 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r4, 0x4}, @increfs_done={0x40106308, r2, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00004a5000-0xd)="2f6465762f7573626d6f6e2300", 0xa1, 0x20100) connect$bt_sco(r3, &(0x7f00000cb000)={0x1f, {0x2, 0x800, 0x6, 0x9, 0x10000, 0x8}}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$SO_PEERCRED(r3, 0x1, 0x11, &(0x7f0000e69000)={0x0, 0x0, 0x0}, 0xc) fstat(r0, &(0x7f000042e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000206000-0x7)={0x1, 0x6, r4, 0x1, r5, 0x6, 0x9, 0x5c}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fremovexattr(r0, &(0x7f0000056000)=@known="73797374656d2e736f636b70726f746f6e616d6500") syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000c97000-0xa)="2f6465762f6375736500", 0x4081, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000a14000-0x8)=@assoc_value={0x0, 0x5}, &(0x7f00006d1000)=0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000913000)={0x7fff, 0x1000}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00002db000)=@assoc_value={r2, 0x2}, 0x8) io_setup(0x5, &(0x7f0000f23000)=0x0) write(r1, &(0x7f0000356000)="d6dd16afcabc3d01abc290e06521813a1d280e3b84d68eb76757779637b273f0b2b99c63836d58376ff4184a62a36a595c4d11d71de1e941d4326959d1e27aa988ffdd54af738608c759a0", 0x4b) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00005ef000)="2f6465762f76637300", 0x40000, 0x0) io_cancel(r3, &(0x7f00004ba000)={0x0, 0x0, 0x0, 0xa, 0x9, r4, &(0x7f00009f1000-0xf)="4c7a5fc24bcf442678472701d23af3", 0xf, 0x2, 0x0, 0x8000001, r4}, &(0x7f0000698000)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$mouse(&(0x7f0000810000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r4, 0x5421, &(0x7f0000d39000-0x8)=0x69) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000b76000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00006aa000-0x8)=@assoc_value={0x0, 0x9}, &(0x7f0000fa3000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00002ca000-0x108)={r6, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x5, 0x5, 0x8, 0x9b7, 0x25, 0x843, 0xfffffffffffffa8c, 0x7, 0x7, 0x4, 0x7ff, 0x5, 0xff, 0xf66]}, &(0x7f0000d92000)=0x108) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) socket$alg(0x26, 0x5, 0x0) 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[], 0x0) [ 208.107547] FAULT_INJECTION: forcing a failure. [ 208.107547] name failslab, interval 1, probability 0, space 0, times 0 [ 208.107558] CPU: 1 PID: 27401 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #108 [ 208.107564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2017/11/28 18:58:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14006, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:23 executing program 6 (fault-call:7 fault-nth:1): open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:23 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="", 0x0}], 0x1) [ 208.107568] Call Trace: [ 208.107584] dump_stack+0x194/0x257 [ 208.107604] ? arch_local_irq_restore+0x53/0x53 [ 208.107640] should_fail+0x8c0/0xa40 [ 208.107658] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.107678] ? lock_page_memcg+0x2bd/0x3b0 [ 208.107701] ? find_held_lock+0x39/0x1d0 [ 208.107736] ? lock_downgrade+0x980/0x980 [ 208.107778] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 208.107787] ? trace_event_raw_event_lock+0x340/0x340 [ 208.107801] ? rcu_note_context_switch+0x710/0x710 [ 208.107831] should_failslab+0xec/0x120 [ 208.107844] kmem_cache_alloc_node+0x56/0x760 [ 208.107864] ? reacquire_held_locks+0x201/0x3e0 [ 208.107887] copy_process.part.36+0x1a6a/0x4ae0 [ 208.107902] ? __lock_acquire+0x6e9/0x47f0 [ 208.107934] ? __cleanup_sighand+0x40/0x40 [ 208.107963] ? print_usage_bug+0x3f0/0x3f0 [ 208.107972] ? wake_up_page_bit+0x530/0x530 [ 208.107988] ? __lock_is_held+0xbc/0x140 [ 208.108044] ? __lock_acquire+0x6e9/0x47f0 [ 208.108072] ? perf_trace_lock+0xd6/0x900 [ 208.108081] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 208.108105] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 208.108113] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 208.108122] ? check_noncircular+0x20/0x20 [ 208.108129] ? perf_trace_lock+0xd6/0x900 [ 208.108145] ? print_usage_bug+0x3f0/0x3f0 [ 208.108159] ? perf_trace_lock+0xd6/0x900 [ 208.108183] ? trace_event_raw_event_lock+0x340/0x340 [ 208.108203] ? check_noncircular+0x20/0x20 [ 208.108237] ? perf_trace_lock+0xd6/0x900 [ 208.108260] ? check_noncircular+0x20/0x20 [ 208.108281] ? trace_event_raw_event_lock+0x340/0x340 [ 208.108294] ? find_held_lock+0x39/0x1d0 [ 208.108310] ? check_noncircular+0x20/0x20 [ 208.108337] ? lock_downgrade+0x980/0x980 [ 208.108347] ? __lock_is_held+0xbc/0x140 [ 208.108361] ? perf_trace_lock+0xd6/0x900 [ 208.108384] ? find_held_lock+0x39/0x1d0 [ 208.108413] ? lock_downgrade+0x980/0x980 [ 208.108426] ? get_pid_task+0xbc/0x140 [ 208.108440] ? proc_fail_nth_write+0xb5/0x260 [ 208.108452] ? map_files_get_link+0x3a0/0x3a0 [ 208.108459] ? __lock_is_held+0xbc/0x140 [ 208.108483] _do_fork+0x1ef/0xff0 [ 208.108507] ? fork_idle+0x2d0/0x2d0 [ 208.108526] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 208.108538] ? kernel_read+0x120/0x120 [ 208.108551] ? wait_for_completion+0x7b0/0x7b0 [ 208.108611] ? __sb_end_write+0x9e/0xd0 [ 208.108631] ? fput+0xd2/0x140 [ 208.108642] ? SyS_write+0x184/0x220 [ 208.108651] ? __do_page_fault+0x3d6/0xc90 [ 208.108667] ? SyS_read+0x220/0x220 [ 208.108687] SyS_clone+0x37/0x50 [ 208.108699] ? entry_INT80_compat+0x40/0x40 [ 208.108713] do_fast_syscall_32+0x3ee/0xf9d [ 208.108740] ? do_int80_syscall_32+0x9d0/0x9d0 [ 208.108762] ? lockdep_sys_exit+0x47/0xf0 [ 208.108773] ? syscall_return_slowpath+0x2ad/0x550 [ 208.108791] ? sysret32_from_system_call+0x5/0x3b [ 208.108813] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.108838] entry_SYSENTER_compat+0x51/0x60 [ 208.108846] RIP: 0023:0xf7f8dc79 [ 208.108851] RSP: 002b:00000000f778908c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 208.108861] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 208.108866] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020208000 [ 208.108871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.108876] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 208.108880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.109868] binder: 27392:27410 transaction failed 29189/-22, size 0-0 line 2755 [ 208.114278] binder: 27395:27402 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 208.114289] binder: 27395:27402 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 208.114303] binder: 27395:27402 BC_INCREFS_DONE u0000000000000000 no match [ 208.114345] binder: 27402 RLIMIT_NICE not set [ 208.142346] binder: 27395:27412 BC_INCREFS_DONE uffffffffffffffff no match [ 208.142359] binder: 27395:27412 got transaction to invalid handle [ 208.142371] binder: 27395:27412 transaction failed 29201/-22, size 40-16 line 2755 [ 208.146267] binder: 27395:27412 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 208.146281] binder: 27395:27412 BC_ACQUIRE_DONE u0000000020000000 no match [ 208.146296] binder: 27395:27412 BC_INCREFS_DONE u0000000000000000 node 837 cookie mismatch 0000000000200001 != 0000000000000000 [ 208.152508] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 208.155314] binder: 27395:27412 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 208.155325] binder: 27395:27412 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 208.155340] binder: 27395:27412 BC_INCREFS_DONE u0000000000000000 no match [ 208.155351] binder: 27412 RLIMIT_NICE not set [ 208.156589] binder: BINDER_SET_CONTEXT_MGR already set [ 208.156600] binder: 27395:27402 ioctl 40046207 0 returned -16 [ 208.157837] binder: 27395:27402 BC_INCREFS_DONE uffffffffffffffff no match [ 208.157847] binder: 27395:27402 got transaction to invalid handle [ 208.157860] binder: 27395:27402 transaction failed 29201/-22, size 40-16 line 2755 [ 208.161564] binder: 27395:27402 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 208.161578] binder: 27395:27402 BC_ACQUIRE_DONE u0000000020000000 no match [ 208.161590] binder: 27395:27402 BC_INCREFS_DONE u0000000000000000 no match [ 208.178981] binder: undelivered TRANSACTION_COMPLETE [ 208.179393] binder: undelivered TRANSACTION_COMPLETE [ 208.179408] binder: undelivered transaction 843 [ 208.261786] binder: 27441:27447 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 208.261799] binder: 27441:27447 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 208.261816] binder: 27441:27447 BC_INCREFS_DONE u0000000000000000 no match [ 208.261828] binder: 27447 RLIMIT_NICE not set [ 208.290963] FAULT_INJECTION: forcing a failure. [ 208.290963] name failslab, interval 1, probability 0, space 0, times 0 [ 208.290974] CPU: 1 PID: 27456 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #108 [ 208.290979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.290982] Call Trace: [ 208.290998] dump_stack+0x194/0x257 [ 208.291021] ? arch_local_irq_restore+0x53/0x53 [ 208.291056] should_fail+0x8c0/0xa40 [ 208.291074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.291108] ? find_held_lock+0x39/0x1d0 [ 208.291142] ? lock_downgrade+0x980/0x980 [ 208.291186] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 208.291196] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.291211] ? rcu_note_context_switch+0x710/0x710 [ 208.291247] should_failslab+0xec/0x120 [ 208.291262] kmem_cache_alloc+0x47/0x760 [ 208.291274] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 208.291286] ? rcu_pm_notify+0xc0/0xc0 [ 208.291308] prepare_creds+0x78/0x360 [ 208.291318] ? abort_creds+0x130/0x130 [ 208.291333] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 208.291340] ? __lockdep_init_map+0xe4/0x650 [ 208.291363] copy_creds+0x7b/0x3a0 [ 208.291385] copy_process.part.36+0xb28/0x4ae0 [ 208.291400] ? __lock_acquire+0x6e9/0x47f0 [ 208.291433] ? __cleanup_sighand+0x40/0x40 [ 208.291462] ? print_usage_bug+0x3f0/0x3f0 [ 208.291470] ? wake_up_page_bit+0x530/0x530 [ 208.291484] ? __lock_is_held+0xbc/0x140 [ 208.291535] ? __lock_acquire+0x6e9/0x47f0 [ 208.291563] ? perf_trace_lock+0xd6/0x900 [ 208.291571] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 208.291600] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 208.291610] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 208.291621] ? check_noncircular+0x20/0x20 [ 208.291627] ? perf_trace_lock+0xd6/0x900 [ 208.291645] ? print_usage_bug+0x3f0/0x3f0 [ 208.291660] ? perf_trace_lock+0xd6/0x900 [ 208.291684] ? trace_event_raw_event_lock+0x340/0x340 [ 208.291702] ? check_noncircular+0x20/0x20 [ 208.291735] ? perf_trace_lock+0xd6/0x900 [ 208.291744] ? check_noncircular+0x20/0x20 [ 208.291771] ? find_held_lock+0x39/0x1d0 [ 208.291783] ? check_noncircular+0x20/0x20 [ 208.291810] ? lock_downgrade+0x980/0x980 [ 208.291820] ? __lock_is_held+0xbc/0x140 [ 208.291836] ? perf_trace_lock+0xd6/0x900 [ 208.291861] ? find_held_lock+0x39/0x1d0 [ 208.291894] ? lock_downgrade+0x980/0x980 [ 208.291907] ? get_pid_task+0xbc/0x140 [ 208.291921] ? proc_fail_nth_write+0xb5/0x260 [ 208.291933] ? map_files_get_link+0x3a0/0x3a0 [ 208.291940] ? __lock_is_held+0xbc/0x140 [ 208.291964] _do_fork+0x1ef/0xff0 [ 208.291988] ? fork_idle+0x2d0/0x2d0 [ 208.292007] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 208.292019] ? kernel_read+0x120/0x120 [ 208.292032] ? wait_for_completion+0x7b0/0x7b0 [ 208.292095] ? __sb_end_write+0x9e/0xd0 [ 208.292115] ? fput+0xd2/0x140 [ 208.292127] ? SyS_write+0x184/0x220 [ 208.292136] ? __do_page_fault+0x3d6/0xc90 [ 208.292151] ? SyS_read+0x220/0x220 [ 208.292172] SyS_clone+0x37/0x50 [ 208.292183] ? entry_INT80_compat+0x40/0x40 [ 208.292196] do_fast_syscall_32+0x3ee/0xf9d [ 208.292221] ? do_int80_syscall_32+0x9d0/0x9d0 [ 208.292251] ? lockdep_sys_exit+0x47/0xf0 [ 208.292263] ? syscall_return_slowpath+0x2ad/0x550 [ 208.292280] ? sysret32_from_system_call+0x5/0x3b [ 208.292303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.292328] entry_SYSENTER_compat+0x51/0x60 [ 208.292335] RIP: 0023:0xf7f8dc79 [ 208.292340] RSP: 002b:00000000f778908c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 208.292349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 208.292355] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020208000 [ 208.292360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.292364] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 208.292368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.298983] binder: 27441:27462 BC_INCREFS_DONE uffffffffffffffff no match [ 208.298995] binder: 27441:27462 got transaction to invalid handle [ 208.299009] binder: 27441:27462 transaction failed 29201/-22, size 40-16 line 2755 [ 208.301891] binder: 27441:27462 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 208.301904] binder: 27441:27462 BC_ACQUIRE_DONE u0000000020000000 no match [ 208.301916] binder: 27441:27462 BC_INCREFS_DONE u0000000000000000 node 844 cookie mismatch 0000000000200001 != 0000000000000000 [ 208.308808] binder: 27441:27462 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 208.308819] binder: 27441:27462 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 208.308832] binder: 27441:27462 BC_INCREFS_DONE u0000000000000000 no match [ 208.308841] binder: 27462 RLIMIT_NICE not set [ 208.310548] binder: BINDER_SET_CONTEXT_MGR already set [ 208.310559] binder: 27441:27447 ioctl 40046207 0 returned -16 [ 208.314255] binder: 27441:27447 BC_INCREFS_DONE uffffffffffffffff no match [ 208.314266] binder: 27441:27447 got transaction to invalid handle [ 208.314277] binder: 27441:27447 transaction failed 29201/-22, size 40-16 line 2755 [ 208.315718] binder: 27441:27447 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 208.315731] binder: 27441:27447 BC_ACQUIRE_DONE u0000000020000000 no match [ 208.315744] binder: 27441:27447 BC_INCREFS_DONE u0000000000000000 no match [ 208.330589] binder: undelivered TRANSACTION_COMPLETE [ 208.330765] binder: undelivered TRANSACTION_COMPLETE 2017/11/28 18:58:24 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000297000)={0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r4) keyctl$assume_authority(0x10, r4) r5 = getpid() fstat(r0, &(0x7f0000ca1000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000d4000)=[0xffffffffffffffff]) r8 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000517000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000487000)=0xe8) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000612000-0xc)={0x0, 0x0, 0x0}, 0xc) r11 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000a1b000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000d13000-0x4)=0xe8) r13 = getegid() sendmsg$unix(r0, &(0x7f0000689000-0x1c)={&(0x7f0000ec2000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f00000db000-0x2)=[{&(0x7f0000161000)="bee88e6d59dcaf666b31b0ec88a10a2cd25319a41d008efbb6f4ffb916443696dcef3a76c9aa45eacd8aa7d2d99ec8da3411f09b928dd1a500772c4c5c05b933bb889f5bcb8959d48bc925ec345f8b0ebd7eb9f9ae4f432876843c702ecb072280bfb522de34a7acac467e93bf2da1b7fa67048b66224e7f6be41e7d7bd73d21a8affac6b830bf84e3f7bbeeb4149bc47472464f2d9c3790b85049ff60c534c76f1924fc957641ca7f9c754125574f58f71f1c95268daf98", 0xb8}, {&(0x7f0000eb1000-0x6)="da53a650f927", 0x6}, {&(0x7f000042d000)="073d4db3207888df2bf95b2a8d12434bd850862170d8cac43dc950d6bbf7b5344e21f6b80d444f879e26ad2182cdb89cbe99ffe7683059fb766e89beb2d1e0b1150410f5bc1feb91c5aaec3019aa", 0x4e}], 0x3, &(0x7f0000b3f000-0x11c)=[@rights={0x28, 0x1, 0x1, [r3, r3, r1, r1, r1, r0, r1]}, @rights={0x34, 0x1, 0x1, [r1, r1, r1, r0, r0, r3, r0, r2, r0, r3]}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @rights={0x34, 0x1, 0x1, [r2, r1, r0, r3, r3, r3, r1, r0, r1, r1]}, @cred={0x18, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r3, r2, r2]}, @rights={0x2c, 0x1, 0x1, [r3, r2, r2, r1, r1, r0, r2, r2]}, @cred={0x18, 0x1, 0x2, r11, r12, r13}], 0x11c, 0x48800}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r14 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r15 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r14, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r14, 0xc018620b, &(0x7f000000c000)={r15, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r14, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:24 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff", 0x15}], 0x1) 2017/11/28 18:58:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r3, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r4 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r4, 0x4}, @increfs_done={0x40106308, r2, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000eae000-0x8)="2e2f66696c653000", 0x40) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f000003e000-0x4)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x9, 0x3, 0x1f) lseek(r2, 0x0, 0xc497b6648c7933d6) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000785000-0x1)=0x4, &(0x7f0000a74000)=0x2) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000842000-0x14)={0xffffffff80000000, 0x1000, 0x20, 0x6, 0x0}) r3 = syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f000072e000-0x4)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000d27000-0x10)={r3, 0x28, &(0x7f00001d7000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 2017/11/28 18:58:24 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0xc53, 0x100) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00003b5000-0x11)="2f6465762f7161745f6164665f63746c00", 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000120000)="2f6465762f6877726e6700", 0x40, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000002000-0x4)=0x83, 0x4) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f000048e000)={r1, 0x8e35, 0x100000000, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:24 executing program 6 (fault-call:7 fault-nth:2): open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00005c0000-0x390)={0x5, {{0xa, 0x0, 0xffffffff, @loopback={0x0, 0x1}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2d4838f06eb2da78, 0x6, [{{0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xc000000000000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x10000, @loopback={0x0, 0x1}, 0x100000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0xfffffffff94c1383, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x390) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto(r0, &(0x7f000013d000)="4ac050847f621b3b8a6fbe2e31419137b9cc7ad60bce82ea95df222d210e3a46932f8b24e1b87ee13d52e5385537cdaca6b35d74d0797dbb71efdd9c04122e256aad95874661", 0x46, 0x20008004, &(0x7f00005b5000-0x1c)=@in6={0xa, 0x1, 0x1, @loopback={0x0, 0x1}, 0x200}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000cf4000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000035000)=0x14, 0x800) getsockname$packet(r0, &(0x7f00003b3000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00008c2000)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 208.330778] binder: undelivered transaction 850 [ 209.367139] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.396497] binder: 27476:27486 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e0002040008", 0x1f}], 0x1) 2017/11/28 18:58:25 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000fc0000-0xb)="706b6373375f7465737400", &(0x7f00009ac000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00005f2000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, r0) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x18, 0x0, &(0x7f000027e000-0x20)=[@enter_looper={0x630c}, @increfs={0x40046304, 0x4}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00009e1000-0x30)={0x0, 0x0, &(0x7f0000d5a000)=[], 0x2, 0x0, &(0x7f0000e6e000)="7bea"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) pipe(&(0x7f0000ec3000-0x8)={0x0, 0x0}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000160000)=0x20, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 209.397225] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid 2017/11/28 18:58:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x400, &(0x7f0000e1b000-0x4)=0x0) r2 = syz_open_dev$vcsn(&(0x7f000082d000-0xa)="2f6465762f7663732300", 0x10000, 0x12000) io_submit(r1, 0x1, &(0x7f0000029000)=[&(0x7f0000eb1000)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000fe9000)="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", 0x1000, 0x3, 0x0, 0x1, r2}]) lstat(&(0x7f00000b0000)="2e2f66696c653000", &(0x7f000004f000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00002e9000)="2e2f66696c653000", &(0x7f00005e5000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000c5f000)="2e2f66696c653000", r3, r4) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000", 0x24}], 0x1) 2017/11/28 18:58:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000659000-0x10)={0x1, 0x80000001, 0x8001, 0x100}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000591000-0x9)="2f6465762f76637300", 0x12002, 0x0) recvfrom$inet(r3, &(0x7f0000c11000-0x2c)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2c, 0x3, &(0x7f0000779000+0x721)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 209.402771] binder: 27478:27485 got reply transaction with no transaction stack [ 209.402779] binder: 27478:27485 transaction failed 29201/-71, size 2-1886661253 line 2670 2017/11/28 18:58:25 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000", 0x27}], 0x1) 2017/11/28 18:58:25 executing program 6 (fault-call:7 fault-nth:3): open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) [ 209.402964] binder: 27478:27485 transaction failed 29189/-22, size 0-0 line 2755 [ 209.431466] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.442950] FAULT_INJECTION: forcing a failure. [ 209.442950] name failslab, interval 1, probability 0, space 0, times 0 2017/11/28 18:58:25 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) pipe(&(0x7f0000d1e000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000de7000-0xbc)={0x7, 0x3, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1, "87867b8e27cd3f22", "697427dc99b8e36f4a8c0e0b89070bc75f7b39be5ffdf820ba6fcf36a1f75c61", 0x3, 0x101, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r3 = socket(0x9, 0x80006, 0x3f) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000e3000)={0x0, 0x100, 0x5a6, 0x1, 0x80, 0xc890}, &(0x7f0000afc000-0x4)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000e9e000+0x907)={r4, @in6={{0xa, 0x1, 0x100000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x8, 0x8, 0x7, 0x10}, &(0x7f0000500000)=0xa0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) r7 = socket$inet(0x2, 0x7, 0x9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00004ac000-0x8)={0x0, 0x6}, &(0x7f000023a000)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000220000)=@assoc_value={r8, 0x2}, &(0x7f0000d91000)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000e75000-0x8)="2e2f66696c653000", 0x0, 0x98) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000693000-0xf8)={0x6, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000256000)="6e65742f736f636b737461743600") ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00004f8000)=0x0) r2 = gettid() r3 = gettid() kcmp(r2, r3, 0x6, r1, r1) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x0, 0x989680}, &(0x7f0000048000)=0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000093b000)={r1, 0x18, &(0x7f0000ccc000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000692000)=@assoc_value={0x0, 0x74}, &(0x7f0000a1b000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000862000)={r5, 0x800}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000474000)=r4, 0x4) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) [ 209.442961] CPU: 1 PID: 27488 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #108 [ 209.442967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.442970] Call Trace: [ 209.442988] dump_stack+0x194/0x257 [ 209.443012] ? arch_local_irq_restore+0x53/0x53 [ 209.443047] should_fail+0x8c0/0xa40 [ 209.443066] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.443099] ? find_held_lock+0x39/0x1d0 [ 209.443138] ? lock_downgrade+0x980/0x980 [ 209.443181] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 209.443192] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.443207] ? rcu_note_context_switch+0x710/0x710 [ 209.443237] should_failslab+0xec/0x120 [ 209.443251] kmem_cache_alloc+0x47/0x760 [ 209.443269] ? rcu_pm_notify+0xc0/0xc0 [ 209.443291] prepare_creds+0x78/0x360 [ 209.443301] ? abort_creds+0x130/0x130 [ 209.443316] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 209.443324] ? __lockdep_init_map+0xe4/0x650 [ 209.443347] copy_creds+0x7b/0x3a0 [ 209.443370] copy_process.part.36+0xb28/0x4ae0 [ 209.443385] ? __lock_acquire+0x6e9/0x47f0 [ 209.443416] ? __cleanup_sighand+0x40/0x40 [ 209.443444] ? print_usage_bug+0x3f0/0x3f0 [ 209.443452] ? wake_up_page_bit+0x530/0x530 [ 209.443466] ? __lock_is_held+0xbc/0x140 [ 209.443511] ? __lock_acquire+0x6e9/0x47f0 [ 209.443541] ? perf_trace_lock+0xd6/0x900 [ 209.443551] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 209.443580] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 209.443591] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 209.443602] ? check_noncircular+0x20/0x20 [ 209.443610] ? perf_trace_lock+0xd6/0x900 [ 209.443627] ? print_usage_bug+0x3f0/0x3f0 [ 209.443643] ? perf_trace_lock+0xd6/0x900 [ 209.443666] ? trace_event_raw_event_lock+0x340/0x340 [ 209.443684] ? check_noncircular+0x20/0x20 [ 209.443715] ? perf_trace_lock+0xd6/0x900 [ 209.443725] ? check_noncircular+0x20/0x20 [ 209.443751] ? find_held_lock+0x39/0x1d0 [ 209.443764] ? check_noncircular+0x20/0x20 [ 209.443789] ? lock_downgrade+0x980/0x980 [ 209.443801] ? __lock_is_held+0xbc/0x140 [ 209.443816] ? perf_trace_lock+0xd6/0x900 [ 209.443838] ? find_held_lock+0x39/0x1d0 [ 209.443868] ? lock_downgrade+0x980/0x980 [ 209.443882] ? get_pid_task+0xbc/0x140 [ 209.443896] ? proc_fail_nth_write+0xb5/0x260 [ 209.443910] ? map_files_get_link+0x3a0/0x3a0 [ 209.443918] ? __lock_is_held+0xbc/0x140 [ 209.443941] _do_fork+0x1ef/0xff0 [ 209.443963] ? fork_idle+0x2d0/0x2d0 [ 209.443983] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 209.443995] ? kernel_read+0x120/0x120 [ 209.444008] ? wait_for_completion+0x7b0/0x7b0 [ 209.444063] ? __sb_end_write+0x9e/0xd0 [ 209.444081] ? fput+0xd2/0x140 [ 209.444093] ? SyS_write+0x184/0x220 [ 209.444104] ? __do_page_fault+0x3d6/0xc90 [ 209.444118] ? SyS_read+0x220/0x220 [ 209.444148] SyS_clone+0x37/0x50 [ 209.444162] ? entry_INT80_compat+0x40/0x40 [ 209.444176] do_fast_syscall_32+0x3ee/0xf9d [ 209.444203] ? do_int80_syscall_32+0x9d0/0x9d0 [ 209.444229] ? lockdep_sys_exit+0x47/0xf0 [ 209.444240] ? syscall_return_slowpath+0x2ad/0x550 [ 209.444258] ? sysret32_from_system_call+0x5/0x3b [ 209.444278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.444301] entry_SYSENTER_compat+0x51/0x60 [ 209.444308] RIP: 0023:0xf7f8dc79 [ 209.444312] RSP: 002b:00000000f778908c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 209.444322] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 209.444328] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020208000 [ 209.444332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.444337] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 209.444342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.459234] binder: 27476:27499 BC_INCREFS_DONE uffffffffffffffff no match [ 209.459246] binder: 27476:27499 got transaction to invalid handle [ 209.459256] binder: 27476:27499 transaction failed 29201/-22, size 40-16 line 2755 [ 209.462962] binder: 27476:27499 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 209.462974] binder: 27476:27499 BC_ACQUIRE_DONE u0000000020000000 no match [ 209.462987] binder: 27476:27499 BC_INCREFS_DONE u0000000000000000 node 853 cookie mismatch 0000000000200001 != 0000000000000000 [ 209.467827] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 209.478298] binder: 27502:27504 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 209.478308] binder: 27502:27504 Acquire 1 refcount change on invalid ref 0 ret -22 [ 209.478333] binder: 27504 RLIMIT_NICE not set [ 209.479596] binder: 27476:27499 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 209.479605] binder: 27476:27499 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 209.479616] binder: 27476:27499 BC_INCREFS_DONE u0000000000000000 no match [ 209.479623] binder: 27499 RLIMIT_NICE not set [ 209.479646] binder: BINDER_SET_CONTEXT_MGR already set [ 209.479653] binder: 27476:27506 ioctl 40046207 0 returned -16 [ 209.525531] binder: 27502:27519 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 209.525543] binder: 27502:27519 BC_ACQUIRE_DONE u0000000000000000 no match [ 209.525552] binder: 27502:27519 BC_INCREFS_DONE u0000000000000000 no match [ 209.525561] binder: 27519 RLIMIT_NICE not set [ 209.550489] binder: 27502:27527 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 209.550513] binder: 27502:27527 BC_FREE_BUFFER u0000000000000000 no match [ 209.550531] binder: 27502:27527 got reply transaction with no transaction stack [ 209.550551] binder: 27502:27527 transaction failed 29201/-71, size 0-8 line 2670 [ 209.612784] FAULT_INJECTION: forcing a failure. [ 209.612784] name failslab, interval 1, probability 0, space 0, times 0 [ 209.612796] CPU: 1 PID: 27529 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #108 [ 209.612801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.612805] Call Trace: [ 209.612820] dump_stack+0x194/0x257 [ 209.612839] ? arch_local_irq_restore+0x53/0x53 [ 209.612873] should_fail+0x8c0/0xa40 [ 209.612891] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.612926] ? find_held_lock+0x39/0x1d0 [ 209.612961] ? lock_downgrade+0x980/0x980 [ 209.613008] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 209.613020] ? selinux_cred_prepare+0x78/0xa0 [ 209.613034] ? rcu_note_context_switch+0x710/0x710 [ 209.613046] ? security_prepare_creds+0x89/0xb0 [ 209.613074] should_failslab+0xec/0x120 [ 209.613091] kmem_cache_alloc+0x47/0x760 [ 209.613100] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 209.613108] ? __lockdep_init_map+0xe4/0x650 [ 209.613131] ? key_put+0x28/0x80 [ 209.613153] __delayacct_tsk_init+0x20/0x80 [ 209.613170] copy_process.part.36+0x1bd0/0x4ae0 [ 209.613186] ? __lock_acquire+0x6e9/0x47f0 [ 209.613221] ? __cleanup_sighand+0x40/0x40 [ 209.613250] ? print_usage_bug+0x3f0/0x3f0 [ 209.613258] ? wake_up_page_bit+0x530/0x530 [ 209.613274] ? __lock_is_held+0xbc/0x140 [ 209.613325] ? __lock_acquire+0x6e9/0x47f0 [ 209.613354] ? perf_trace_lock+0xd6/0x900 [ 209.613361] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 209.613391] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 209.613401] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 209.613412] ? check_noncircular+0x20/0x20 [ 209.613418] ? perf_trace_lock+0xd6/0x900 [ 209.613437] ? print_usage_bug+0x3f0/0x3f0 [ 209.613452] ? perf_trace_lock+0xd6/0x900 [ 209.613478] ? trace_event_raw_event_lock+0x340/0x340 [ 209.613498] ? check_noncircular+0x20/0x20 [ 209.613534] ? perf_trace_lock+0xd6/0x900 [ 209.613543] ? check_noncircular+0x20/0x20 [ 209.613571] ? find_held_lock+0x39/0x1d0 [ 209.613583] ? check_noncircular+0x20/0x20 [ 209.613610] ? lock_downgrade+0x980/0x980 [ 209.613620] ? __lock_is_held+0xbc/0x140 [ 209.613636] ? perf_trace_lock+0xd6/0x900 [ 209.613661] ? find_held_lock+0x39/0x1d0 [ 209.613695] ? lock_downgrade+0x980/0x980 [ 209.613708] ? get_pid_task+0xbc/0x140 [ 209.613722] ? proc_fail_nth_write+0xb5/0x260 [ 209.613736] ? map_files_get_link+0x3a0/0x3a0 [ 209.613742] ? __lock_is_held+0xbc/0x140 [ 209.613766] _do_fork+0x1ef/0xff0 [ 209.613791] ? fork_idle+0x2d0/0x2d0 [ 209.613810] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 209.613823] ? kernel_read+0x120/0x120 [ 209.613836] ? wait_for_completion+0x7b0/0x7b0 [ 209.613900] ? __sb_end_write+0x9e/0xd0 [ 209.613920] ? fput+0xd2/0x140 [ 209.613931] ? SyS_write+0x184/0x220 [ 209.613940] ? __do_page_fault+0x3d6/0xc90 [ 209.613955] ? SyS_read+0x220/0x220 [ 209.613977] SyS_clone+0x37/0x50 [ 209.613989] ? entry_INT80_compat+0x40/0x40 [ 209.614003] do_fast_syscall_32+0x3ee/0xf9d [ 209.614028] ? do_int80_syscall_32+0x9d0/0x9d0 [ 209.614058] ? syscall_return_slowpath+0x2ad/0x550 [ 209.614077] ? sysret32_from_system_call+0x5/0x3b [ 209.614098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.614127] entry_SYSENTER_compat+0x51/0x60 [ 209.614135] RIP: 0023:0xf7f8dc79 [ 209.614140] RSP: 002b:00000000f778908c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 209.614150] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 209.614156] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020208000 [ 209.614161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2017/11/28 18:58:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000dff000-0xd)="6365706800", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000cf3000-0x20)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x38, 0x0, &(0x7f0000aff000-0x38)=[@enter_looper={0x630c}, @enter_looper={0x630c}, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x0, 0x1}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x2}], 0xdb, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764b70b7a9eb5dbeefe72829105ce908b33aea8e2"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, r3, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f000000f000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x6, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x3d, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) r4 = mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00006fa000-0x30)={0x88, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r4, 0x4}, @increfs_done={0x40106308, r2, 0x200001}, @acquire={0x40046305, 0x0}, @enter_looper={0x630c}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f000000f000)=[], &(0x7f0000010000-0x10)=[]}}], 0x22, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339ae20586331cd7b22c"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) 2017/11/28 18:58:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00005d3000)={0x7b, 0x0, [0x9, 0x0, 0x7, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) 2017/11/28 18:58:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="2900000018003109000000010000000102000000ff030000800e00020400080204ff0000000000ff", 0x28}], 0x1) 2017/11/28 18:58:26 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x300, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000043c000-0xa)="656e6372797074656400", &(0x7f0000331000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002b000)="68f750ed91fd0918303ecfeccc741c6a1efb3ba3baa987d3f2b96549e07cc28798c3f97da09f7ba512f76f08000000a5af4b5954b7f3124fcb7e1445bc0e0597e1224c3f84857c57141286804eb434284989e572183fb47869744546654e46c44ecb2493", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000fd5000-0xd)="6482735f7265736f6c76657200", &(0x7f0000652000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f9b000)="2d74727573746564576f7369785f61636c5f61636365737373797374656d5b00", r1) keyctl$assume_authority(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000c65000-0x9)="2f6465762f6b766d00", 0x400000, 0x0) r2 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = mmap$binder(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000c000)={r3, 0x0, 0x0, 0x0}) r4 = syz_open_dev$mice(&(0x7f0000e93000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x20481) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000000d000-0x70)=[@enter_looper={0x630c}, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f000000d000-0x58)=[@flat={0x77682a85, 0xa, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f000000c000+0xb73)="f3", 0x1, 0x4d3, 0x3ff}], &(0x7f0000009000)=[0x78]}}, @acquire={0x40046305, 0x0}, @increfs_done={0x40106308, 0x0, 0x2}], 0xc8, 0x0, &(0x7f0000005000)="4580c51144c79fb2803f49ba78d333d44b5da19babc8529c9a22303dbe1eba74dca2355b17bf9030e6f9739f3ea957bd6d55f51879d554c068af3eb69f3a9147f44c307977e27c48cca6654306b8c46e690d20acbc59e322259d12573345b33a1ff0070d227cdfdc476928685fbfe2329916ac7c9ac7569ee559a1fb8e5aa1b17f6a74049355840d224aa4ad44744f1ee2e7412fb537b379a72ef92262fc4081501ed7493c43e648624611ee8adfb3e1847ff41ea6493190afb7f6dc88a2c0ada27b3d2b797b1764"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0405405, &(0x7f0000809000-0x40)={{0x0, 0x1, 0x5, 0x3, 0x7ff}, 0x3f, 0x5, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002000)={0x3c, 0x0, &(0x7f0000002000-0x88)=[@enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x0}, @acquire_done={0x40106309, 0x0, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}, @enter_looper={0x630c}], 0x1a, 0x0, &(0x7f0000008000)="21978db22e818d15631959572502907099ca68bb66b7727c339a"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x68, 0x0, &(0x7f0000005000-0x68)=[@clear_death={0x400c630f, 0x2, 0x1}, @free_buffer={0x40086303, 0x0}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x80, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f000000a000)=[], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x15, 0x0, &(0x7f0000002000)="5679af9f779f13889f37c41beeea12bd5a1bddca67"}) setrlimit(0x9, &(0x7f00000aa000-0x10)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000db9000)={0x0, 0x10, &(0x7f0000015000-0x10)=[@in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00009fd000-0x4)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000557000-0x14)={r5, 0x2, 0x7ff, 0x8, 0x81, 0x3}, &(0x7f0000317000)=0x14) 2017/11/28 18:58:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x20800, 0x0, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x3, 0x14004, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000f33000)="2f6465762f7573626d6f6e2300", 0x0, 0x400) r4 = gettid() stat(&(0x7f0000514000)="2e2f66696c653000", &(0x7f0000a1b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00007cf000-0x4)=0x0) getresuid(&(0x7f0000a0b000)=0x0, &(0x7f0000a56000)=0x0, &(0x7f000051d000)=0x0) r9 = getegid() ioctl$TIOCGSID(r2, 0x540f, &(0x7f0000957000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000a08000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000aac000-0x4)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000b91000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000208000)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00003c8000-0x4)=0x0) lstat(&(0x7f0000117000)="2e2f66696c653000", &(0x7f0000303000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000e4f000)={0x0, 0x0, 0x0}, &(0x7f0000fa8000-0x4)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a34000-0xc)={0x0, 0x0, 0x0}, 0xc) stat(&(0x7f0000cce000-0x8)="2e2f66696c653000", &(0x7f0000360000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f000044d000-0x4)=0x0, &(0x7f000041a000-0x4)=0x0, &(0x7f0000264000)=0x0) r19 = getpid() r20 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000c7e000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000ef7000)=0xc) ioctl$TIOCGSID(r0, 0x540f, &(0x7f00007aa000)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00007b5000)={0x0, 0x0, 0x0}, &(0x7f0000acb000)=0xc) lstat(&(0x7f000078b000-0x8)="2e2f66696c653000", &(0x7f00009b4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000f29000)={0x0, 0x0, 0x0}, &(0x7f00004e2000-0x4)=0xc) getresgid(&(0x7f0000580000)=0x0, &(0x7f0000910000)=0x0, &(0x7f00004b3000)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00004d6000-0x4)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000dfa000-0xe8)={{{@in=@multicast1=0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000075c000)=0xe8) r30 = getegid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f00006e8000)={0x0, 0x0, 0x0}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000038f000-0xe8)={{{@in=@rand_addr=0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001ab000)=0xe8) getgroups(0x8, &(0x7f0000d4a000-0x20)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) sendmmsg$unix(r3, &(0x7f0000468000-0x8c)=[{&(0x7f000082b000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000649000)=[{&(0x7f0000521000-0x8e)="4dcfa43ad772aaeb96fc3ba0e219089e3bbb45a43c31b150ea82ae745dedfb2fe9b63d84f852db1d15d40581f1258cb80af59f926ee6d881d83e0afbe256788345d10feefe0f2da826ca8ca6f597862f189ff7ec9aa6b4b3e5f4fab29df5cc479ad760b01c030ce39ad771da43ced44cdf80b559c4a8353adebb134e11bf0d1366f116b1b0b2b9d447099eeec0f6", 0x8e}], 0x1, &(0x7f0000214000-0x30)=[@cred={0x18, 0x1, 0x2, r4, r5, r6}, @cred={0x18, 0x1, 0x2, r7, r8, r9}], 0x30, 0x4008801}, {&(0x7f00000ad000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f000035a000)=[{&(0x7f0000c50000)="c8fbbc13619b19864f1355a8119702bb220bcacdd152547bdce38f8c91234d3bf558be858fdc9dcfb4c938c709e810e5975ee4d8072e3c78dea5dfb1d9debcae4f3c07f9b8aa875d2435448a50fc6b026fcb931435caa6cb2cc952863acb1327f131ad6e6d23b6edfd51bed8fa39e06321898ef7668088553aa42e4da853718fd2f015263f52bd93dbe43ed7e42edc2281a062ec174f751a87c13a79a20102b5b4de9f1cd30bac5ab7370377db8f25a460a6927d5baf095f833b3cf936ef916049", 0xc1}, {&(0x7f000033e000-0x80)="49a9c32f08230544ed660df592dfd75d094fa24fd0e61595efd84dbe5597de7ce73b51ad63d2f29e2a2dcc309af4e546ea70aac82eb91a452f5d25a35d71a748c4d9484ab73030a72c562c9ccf90769297331fb25dabcd70387999e762c3008edadf75323be41415c9790aded7b811ea54ea7d903e632aa2f24140f6f20676de", 0x80}], 0x2, 0x0, 0x0, 0xeb28fcaead39e962}, {&(0x7f00000d8000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f000036f000-0x18)=[{&(0x7f00008d0000)="0017a05e218b15b42c3419fb6e8d5ead75febeed6d4d50862b5428b99663152cea304ea3370355537cb83ff1e1b346fb2f8ea4a6f5961764de759ed084d145ca065efabfaa5ece6dc7f96059d02878b22eabdb7f6a46116a91db73562eef128244d98a55a1", 0x65}, {&(0x7f00008cf000-0x50)="f95a9bed153afc74fa21b3a3c16d54968944e461e7ad792845c909e0f1976a1cb694668196c74ec41f575d4457d4811d5e33f45cc011485d1bcdb7005bbacd71dd5f1802cc71d03507a8fda65221fe38", 0x50}, {&(0x7f000033b000)="", 0x0}], 0x3, &(0x7f0000a32000-0xc)=[@cred={0x18, 0x1, 0x2, r10, r11, r12}, @rights={0x18, 0x1, 0x1, [r1, r1, r2]}, @rights={0x14, 0x1, 0x1, [r1, r2]}, @rights={0x1c, 0x1, 0x1, [r0, r0, r1, r2]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}, @rights={0x24, 0x1, 0x1, [r2, r1, r2, r1, r1, r2]}, @cred={0x18, 0x1, 0x2, r19, r20, r21}, @cred={0x18, 0x1, 0x2, r22, r23, r24}], 0xe4, 0x11}, {&(0x7f0000ba0000)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f00002a7000-0x18)=[{&(0x7f0000c24000-0xbc)="e118878e57ea6db5459f9bab1d7363baa5627d991cf5f7afd835823c963813716ce5535bb97f0d0799b90a852d2d82b949a53b548d9c147925f34a2e3584e87ed8d3705dc4ab423d6751788139f11c5c62ca67b0db4701ae73f32debeac0ed938a7a0c35197839cdc86dd44b19e89555aa53ef313f3eb86a8a980d4ad63e5e961c8048c295445513233308991ca25b415ce6a7d6dbed3f70156e755aa65f57d4f39e01fe9961939522c9bb7307838ef85f124bae1986bbb14458830d", 0xbc}, {&(0x7f0000beb000)="8f8250bd5231bf40fea4f266642bb513aa48076d89edd2cd3b2a74e7097b3255064c7b192eda360e4a571bebf391ca7fb482ea2b0b0f6be29482ac27615dde0e8a1e7e048adc8db25511e006255e2dbf77a090235b3dea4c4799516f9561f2b770fab53c576a07804f07053bb1913d059482867069fd6eabf2b8e507a288350717c1499306d1a26aa9cf7807f5563c397140854a93bc36b4fe449c2ebd368f45b6", 0xa1}, {&(0x7f0000e75000)="94e1f9f06dc5fab43488", 0xa}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f0000679000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000553000-0x18)=[{&(0x7f0000344000)="d5e1158047002db4763ae1c962e06b6695b26684d84d34289cba054a906cf0eaf0e11a1508e7fe19d79e815cd36712610b4c578f5430f8c8eb22c52bb90e1295d121e071e5704cf2710cd3beab79af3797225a4bacb70a0be2aa3b528c48f452bc37dd831c6a650aabad1d21150bddfed6ffb6ff774b51a584a870c28b6dc588120ea108b2fc2b8f96337035ee6bea40859060a024906a3fafdadacfef82822e", 0xa0}, {&(0x7f000047e000)="770c61235ad0a17b164a20eb55ba49632ce97bb1586e29c746182b3b9313c145c0c953de5f295b39dcc49d59fb4a533b09c3d76ec4", 0x35}, {&(0x7f0000eba000)="", 0x0}], 0x3, &(0x7f00004f7000)=[@cred={0x18, 0x1, 0x2, r25, r26, r27}, @cred={0x18, 0x1, 0x2, r28, r29, r30}, @cred={0x18, 0x1, 0x2, r31, r32, r33}], 0x48, 0x40}], 0x5, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) 2017/11/28 18:58:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000be1000-0xc)="2f6465762f6175746f667300", 0x14000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000253000)={0x0, 0x88, "06fe0f7cea7990c77ee859534a12532c52bd077a52bdb4fb5c190252fa21ec396524ac52d59096387ab49e3579b07da4bc9fd198e865d1f6fb36e6d43cd231ec8f6bcb5caced945655cafe026951d7ad0c38fd49fbc016cc27f4ec39f83a7f1fb42bdbaa7636a77d145f5e16216e554c38900c990eeca61028fa02122c9e4a039a9c1488d39a1c30"}, &(0x7f0000478000)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00006ea000)={0x0, 0x1f}, &(0x7f00007ba000+0xddb)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000e39000)={r1, 0x9, 0x10001, 0x32ef, 0x0, 0x3, 0xb234000000000000, 0x9, {r2, @in6={{0xa, 0x2, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x1, 0x7, 0x7, 0x9}}, &(0x7f0000a7e000)=0xb8) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4000000004, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000f12000)="2f6465762f6175746f667300", 0x1c0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) 2017/11/28 18:58:26 executing program 6 (fault-call:7 fault-nth:4): open(&(0x7f0000e3c000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x4, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0x0) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") modify_ldt$write2(0x11, &(0x7f0000331000-0x10)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f0000090008001916000800", 0x1d) r1 = socket$unix(0x1, 0x0, 0x0) socket(0x1, 0x0, 0x0) r2 = socket(0x12, 0x4, 0x2000) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000d2a000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f0000b28000)=0x0) socket(0x0, 0x0, 0x10) write(r1, &(0x7f000005e000)="240000001d0001000d00fa08000000040539004000000100048000000000000001", 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000fcb000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) socket(0xb, 0x806, 0x2000380000000000) 2017/11/28 18:58:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) membarrier(0x8, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14004, 0x0}) recvfrom$inet6(r0, &(0x7f0000158000-0x3c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3c, 0x1, &(0x7f0000077000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x5}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 209.614165] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 209.614170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.615255] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.500954] binder: 27476:27486 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 210.509313] binder: 27476:27486 BC_INCREFS_DONE u0000000000000000 node 853 cookie mismatch 0000000000000002 != 0000000000000000 [ 210.520950] binder: 27486 RLIMIT_NICE not set [ 210.527888] binder: undelivered TRANSACTION_COMPLETE 2017/11/28 18:58:26 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000000)={{0x4, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, 0x20800, 0x80000000, 0x2, 0xffffffffffffffe0, 0x0, 0x2e7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000046000-0x9)="2f6465762f6b766d00", 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000b0f000-0x4)=0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000aba000)={0x0, 0x14006, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tun(&(0x7f0000520000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) [ 210.561311] encrypted_key: master key parameter '0>ÏìÌtjû;£º©‡Óò¹eIà|‡˜Ãù} Ÿ{¥÷o' is invalid [ 210.572651] binder: 27562:27566 DecRefs 0 refcount change on invalid ref 3 ret -22 2017/11/28 18:58:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000a6e000)="290000001800310900000001000000010200000000ef0006800e00000400080004ff0000000000ff00", 0x29}], 0x1) [ 210.572665] binder: 27562:27566 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 210.572682] binder: 27562:27566 BC_INCREFS_DONE u0000000000000000 no match [ 210.572694] binder: 27566 RLIMIT_NICE not set [ 210.592736] FAULT_INJECTION: forcing a failure. [ 210.592736] name failslab, interval 1, probability 0, space 0, times 0 [ 210.592747] CPU: 0 PID: 27564 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #108 [ 210.592753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.592757] Call Trace: [ 210.592773] dump_stack+0x194/0x257 [ 210.592793] ? arch_local_irq_restore+0x53/0x53 [ 210.592827] should_fail+0x8c0/0xa40 [ 210.592846] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 210.592865] ? find_held_lock+0x39/0x1d0 [ 210.592886] ? find_held_lock+0x39/0x1d0 [ 210.592920] ? lock_downgrade+0x980/0x980 [ 210.592965] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 210.592981] ? rcu_note_context_switch+0x710/0x710 [ 210.592994] ? kvm_clock_get_cycles+0x25/0x30 [ 210.593025] should_failslab+0xec/0x120 [ 210.593041] kmem_cache_alloc_trace+0x4b/0x750 [ 210.593051] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 210.593060] ? __lockdep_init_map+0xe4/0x650 [ 210.593075] ? __lockdep_init_map+0xe4/0x650 [ 210.593098] lockdep_init_task+0x187/0x210 [ 210.593113] copy_process.part.36+0x16eb/0x4ae0 [ 210.593155] ? __cleanup_sighand+0x40/0x40 [ 210.593185] ? print_usage_bug+0x3f0/0x3f0 [ 210.593193] ? wake_up_page_bit+0x530/0x530 [ 210.593208] ? __lock_is_held+0xbc/0x140 [ 210.593259] ? __lock_acquire+0x6e9/0x47f0 [ 210.593287] ? perf_trace_lock+0xd6/0x900 [ 210.593294] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 210.593323] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 210.593333] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 210.593344] ? check_noncircular+0x20/0x20 [ 210.593351] ? perf_trace_lock+0xd6/0x900 [ 210.593369] ? print_usage_bug+0x3f0/0x3f0 [ 210.593384] ? perf_trace_lock+0xd6/0x900 [ 210.593406] ? trace_event_raw_event_lock+0x340/0x340 [ 210.593425] ? check_noncircular+0x20/0x20 [ 210.593459] ? perf_trace_lock+0xd6/0x900 [ 210.593467] ? check_noncircular+0x20/0x20 [ 210.593491] ? find_held_lock+0x39/0x1d0 [ 210.593503] ? check_noncircular+0x20/0x20 [ 210.593526] ? lock_downgrade+0x980/0x980 [ 210.593542] ? __lock_is_held+0xbc/0x140 [ 210.593558] ? perf_trace_lock+0xd6/0x900 [ 210.593581] ? find_held_lock+0x39/0x1d0 [ 210.593611] ? lock_downgrade+0x980/0x980 [ 210.593624] ? get_pid_task+0xbc/0x140 [ 210.593637] ? proc_fail_nth_write+0xb5/0x260 [ 210.593648] ? map_files_get_link+0x3a0/0x3a0 [ 210.593655] ? __lock_is_held+0xbc/0x140 [ 210.593677] _do_fork+0x1ef/0xff0 [ 210.593701] ? fork_idle+0x2d0/0x2d0 [ 210.593720] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 210.593732] ? kernel_read+0x120/0x120 [ 210.593745] ? wait_for_completion+0x7b0/0x7b0 [ 210.593806] ? __sb_end_write+0x9e/0xd0 [ 210.593826] ? fput+0xd2/0x140 [ 210.593837] ? SyS_write+0x184/0x220 [ 210.593846] ? __do_page_fault+0x3d6/0xc90 [ 210.593860] ? SyS_read+0x220/0x220 [ 210.593882] SyS_clone+0x37/0x50 [ 210.593894] ? entry_INT80_compat+0x40/0x40 [ 210.593907] do_fast_syscall_32+0x3ee/0xf9d [ 210.593932] ? do_int80_syscall_32+0x9d0/0x9d0 [ 210.593955] ? lockdep_sys_exit+0x47/0xf0 [ 210.593966] ? syscall_return_slowpath+0x2ad/0x550 [ 210.593984] ? sysret32_from_system_call+0x5/0x3b [ 210.594004] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 210.594029] entry_SYSENTER_compat+0x51/0x60 [ 210.594036] RIP: 0023:0xf7f8dc79 [ 210.594041] RSP: 002b:00000000f778908c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 210.594050] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 210.594056] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020208000 [ 210.594061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.594065] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 210.594070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.624486] binder: 27562:27583 BC_INCREFS_DONE uffffffffffffffff no match [ 210.624500] binder: 27562:27583 got transaction to invalid handle [ 210.624510] binder: 27562:27583 transaction failed 29201/-22, size 40-16 line 2755 [ 210.628608] kasan: CONFIG_KASAN_INLINE enabled [ 210.628611] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 210.628620] general protection fault: 0000 [#1] SMP KASAN [ 210.628625] Dumping ftrace buffer: [ 210.628629] (ftrace buffer empty) [ 210.628632] Modules linked in: [ 210.628641] CPU: 0 PID: 27587 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #108 [ 210.628645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.628650] task: ffff8801c8948180 task.stack: ffff8801c2d18000 [ 210.628661] RIP: 0010:lockdep_invariant_state+0xd6/0x120 [ 210.628665] RSP: 0018:ffff8801c2d1fe48 EFLAGS: 00010002 [ 210.628671] RAX: dffffc0000000000 RBX: 0000000000001d88 RCX: ffffffff81008dab [ 210.628675] RDX: 00000000000003bc RSI: 0000000000000000 RDI: 0000000000001de0 [ 210.628679] RBP: ffff8801c2d1fe58 R08: ffff8801db425a98 R09: 0000000000000000 [ 210.628682] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 210.628686] R13: ffff8801c2d1ff20 R14: ffff8801c2d1ff58 R15: ffff8801c8948180 [ 210.628692] FS: 0000000000000000(0000) GS:ffff8801db400000(0063) knlGS:00000000f7789b40 [ 210.628696] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 210.628700] CR2: 0000000008482798 CR3: 00000001d015b000 CR4: 00000000001426f0 [ 210.628704] Call Trace: [ 210.628713] lockdep_sys_exit+0x47/0xf0 [ 210.628723] syscall_return_slowpath+0x240/0x550 [ 210.628731] ? prepare_exit_to_usermode+0x340/0x340 [ 210.628742] ? copy_overflow+0x20/0x20 [ 210.628764] ret_from_fork+0x15/0x30 [ 210.628770] RIP: 0023:0xf7f8dc79 [ 210.628773] RSP: 002b:000000002016e000 EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 210.628779] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000002016e000 [ 210.628782] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020208000 [ 210.628786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.628789] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 210.628793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.628812] Code: 83 90 11 00 00 83 e0 3f 48 89 c2 48 c1 e2 04 48 29 c2 48 b8 00 00 00 00 00 fc ff df 49 8d 1c d4 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 48 c7 43 58 00 00 00 00 5b 41 5c 5d c3 0f ff [ 210.628937] RIP: lockdep_invariant_state+0xd6/0x120 RSP: ffff8801c2d1fe48 [ 210.628947] ---[ end trace b9e165888afdf187 ]--- [ 210.628951] Kernel panic - not syncing: Fatal exception [ 210.635097] Dumping ftrace buffer: [ 210.635099] (ftrace buffer empty) [ 210.635102] Kernel Offset: disabled [ 211.246899] Rebooting in 86400 seconds..