000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:19 executing program 6 (fault-call:12 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xdb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c3b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000d0c000-0xb)="2f6465762f6c6f6f702300", 0x200000000004, 0x44042) sendfile(0xffffffffffffffff, r0, &(0x7f00000de000-0x8)=0x0, 0x36) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getitimer(0xfffffffffffffffc, &(0x7f0000050000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000000000/0x3f000)=nil, 0x3f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000188000)="2f6465762f6c6f6f702300", 0x2) r4 = syz_open_dev$sndseq(&(0x7f0000636000)="2f6465762f736e642f73657100", 0x0, 0x80) r5 = dup2(r1, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f000002c000)={0x0, 0xfffffffffffff800, 0x5, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2000000000000008, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000040000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000040000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00009b0000)={@loopback=0x7f000001, @loopback=0x7f000001, 0x0, 0x6, [@remote={0xac, 0x14, 0x0, 0xbb}, @loopback=0x7f000001, @empty=0x0, @loopback=0x7f000001, @loopback=0x7f000001, @loopback=0x7f000001]}, 0x28) r7 = gettid() move_pages(r7, 0x6, &(0x7f00003a3000)=[&(0x7f00004ed000/0x4000)=nil, &(0x7f0000daf000/0x3000)=nil, &(0x7f0000026000/0x1000)=nil, &(0x7f0000b7a000/0x2000)=nil, &(0x7f0000082000/0x1000)=nil, &(0x7f000068d000/0x1000)=nil], &(0x7f00001e3000-0x8)=[0x400, 0x11000], &(0x7f0000566000)=[0x0], 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000001000-0xc)={@empty=0x0, @empty=0x0, @loopback=0x7f000001}, 0xc) mmap(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000043000/0x1000)=nil, 0x1000, 0x0, 0x1110, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f0000a9b000-0x10)={0x0, 0x0}) write$sndseq(r3, &(0x7f0000040000)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {0x0, 0x0}, {0x0, 0x8}, @addr={0x6, 0x0}}, {0xd, 0x8, 0x0, 0x0, @tick=0x0, {0x800, 0x7f}, {0x100, 0xfff}, @queue={0x95c, {0xc137, 0xfffffffffffffffe}}}, {0x101, 0x7fff, 0x81, 0x7, @time={0x0, 0x0}, {0xffffffffffffffff, 0xfffffffffffffff9}, {0xa55, 0x3}, @ext={0x48, &(0x7f0000044000)="1e2d87e920bc80621bf2792b2b9d31560c96bcf59e54a881f9ba94de2c72795f64bb8427b1fb8e9099379106ec8635e503713b2e338468e3036c6b79c066021626cc187db537f687"}}, {0x8, 0x2, 0x0, 0x1, @time={r8, r9+30000000}, {0x100, 0x4}, {0x0, 0x4}, @result={0x0, 0x7}}, {0xffffffffffffffff, 0x6, 0x4, 0x100000000, @tick=0x0, {0xde58, 0x6}, {0xfff, 0x81}, @connect={{0x8, 0x4}, {0x7, 0xaa}}}, {0x2, 0xffffffff80000000, 0x4, 0x9, @tick=0x100000001, {0x0, 0x48a}, {0x8000, 0x19}, @quote={{0x2, 0x7}, 0x3, &(0x7f000002c000-0x30)={0x7f, 0x77, 0x107, 0x8, @time={0x0, 0x0}, {0x1, 0x7fff}, {0xfffffffffffffffc, 0x3}, @control={0xecad, 0x0, 0x1}}}}, {0xfffffffffffffffe, 0x5, 0x795, 0x9dc, @time={0x0, 0x0}, {0xb10, 0x100}, {0x4, 0x1ef7}, @result={0x401, 0x7fff}}, {0x10001, 0x3, 0x200, 0x7fff, @time={0x0, 0x0}, {0x9896, 0x8}, {0x9, 0x9}, @connect={{0x100, 0x700ea533}, {0xa7, 0x2595}}}, {0xa5, 0x1bd7, 0x8, 0x7, @tick=0xfffffffffffff001, {0x401, 0x9}, {0xff, 0x0}, @raw8={"1097030f0d49bd34d4f6bc0b"}}], 0x1b0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000000)={0x0, 0x800, 0xfffe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000e65000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000002000-0x50)={0x33, @time={r2, r9}, 0x800000d193, {0x7, 0x1ff}, 0x2, 0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000026000/0x4000)=nil, 0x4000, 0x3, 0x40010, r4, 0x0) 2017/12/05 13:37:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) pipe2(&(0x7f00006b8000)={0x0, 0x0}, 0x800) sendto$inet(r0, &(0x7f0000194000-0x1)="", 0x0, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000b16000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) read(r0, &(0x7f0000d91000)="00", 0x1) shutdown(r0, 0x4000000000001) [ 129.145911] FAULT_INJECTION: forcing a failure. [ 129.145911] name failslab, interval 1, probability 0, space 0, times 0 [ 129.145920] CPU: 1 PID: 15946 Comm: syz-executor6 Not tainted 4.15.0-rc2+ #208 2017/12/05 13:37:19 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) open$dir(&(0x7f00003df000)="2e2f66696c653000", 0xfffffffffffffffd, 0x35) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x3, 0x4000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() openat$kvm(0xffffffffffffff9c, &(0x7f000002c000)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 129.145926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.145929] Call Trace: [ 129.145941] dump_stack+0x194/0x257 [ 129.145959] ? arch_local_irq_restore+0x53/0x53 [ 129.145975] ? perf_trace_lock+0xd6/0x900 [ 129.146000] should_fail+0x8c0/0xa40 [ 129.146021] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 129.146029] ? check_noncircular+0x20/0x20 [ 129.146041] ? perf_trace_lock+0x900/0x900 [ 129.146059] ? trace_event_raw_event_lock+0x340/0x340 [ 129.146079] ? check_noncircular+0x20/0x20 [ 129.146095] ? perf_trace_lock+0x900/0x900 [ 129.146119] ? find_held_lock+0x39/0x1d0 [ 129.146157] ? find_held_lock+0x39/0x1d0 [ 129.146202] should_failslab+0xec/0x120 [ 129.146216] kmem_cache_alloc_node+0x56/0x760 [ 129.146256] __alloc_skb+0xf1/0x780 [ 129.146276] ? skb_copy_and_csum_dev+0x360/0x360 [ 129.146298] ? if_nlmsg_size+0x77a/0xa40 [ 129.146316] ? br_fill_ifinfo+0xc10/0xc10 [ 129.146325] ? nla_put_ifalias+0x160/0x160 [ 129.146344] ? do_raw_spin_trylock+0x190/0x190 [ 129.146368] ? mark_held_locks+0xb2/0x100 [ 129.146386] rtmsg_ifinfo_build_skb+0x73/0x190 [ 129.146408] rtmsg_ifinfo_event.part.26+0x41/0xd0 [ 129.146428] rtmsg_ifinfo+0x72/0x90 [ 129.146444] __dev_notify_flags+0x2c5/0x430 [ 129.146458] ? dev_change_name+0xbd0/0xbd0 [ 129.146467] ? vprintk_default+0x28/0x30 [ 129.146479] ? vprintk_func+0x5e/0xc0 [ 129.146492] ? printk+0xaa/0xca [ 129.146503] ? show_regs_print_info+0x65/0x65 [ 129.146523] ? rtnl_kfree_skbs+0x70/0x70 [ 129.146552] __dev_set_promiscuity+0x19e/0x630 [ 129.146559] ? __dev_set_promiscuity+0x19e/0x630 [ 129.146577] ? __dev_notify_flags+0x430/0x430 [ 129.146596] ? lock_release+0xda0/0xda0 [ 129.146603] ? check_noncircular+0x20/0x20 [ 129.146617] ? refcount_sub_and_test+0x115/0x1b0 [ 129.146630] ? do_raw_spin_trylock+0x190/0x190 [ 129.146648] dev_set_promiscuity+0x51/0xc0 [ 129.146665] packet_dev_mc+0x147/0x280 [ 129.146682] packet_release+0x574/0xce0 [ 129.146709] ? packet_set_ring+0x1b10/0x1b10 [ 129.146719] ? perf_trace_lock+0x900/0x900 [ 129.146743] ? __lock_is_held+0xbc/0x140 [ 129.146759] ? perf_trace_lock+0xd6/0x900 [ 129.146769] ? locks_remove_file+0x3fa/0x5a0 [ 129.146785] ? fcntl_setlk+0x10d0/0x10d0 [ 129.146793] ? fsnotify+0x7b3/0x1140 [ 129.146835] sock_release+0x8d/0x1e0 [ 129.146844] ? sock_release+0x8d/0x1e0 [ 129.146857] ? sock_release+0x1e0/0x1e0 [ 129.146865] sock_close+0x16/0x20 [ 129.146876] __fput+0x333/0x7f0 [ 129.146901] ? fput+0x140/0x140 [ 129.146915] ? _raw_spin_unlock_irq+0x27/0x70 [ 129.146940] ____fput+0x15/0x20 [ 129.146952] task_work_run+0x199/0x270 [ 129.146971] ? task_work_cancel+0x210/0x210 [ 129.146987] ? exit_to_usermode_loop+0x8c/0x310 [ 129.147013] exit_to_usermode_loop+0x296/0x310 [ 129.147030] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 129.147051] ? __close_fd+0x222/0x360 [ 129.147072] syscall_return_slowpath+0x490/0x550 [ 129.147083] ? prepare_exit_to_usermode+0x340/0x340 [ 129.147094] ? SyS_write+0x184/0x220 [ 129.147107] ? entry_SYSCALL_64_fastpath+0x69/0x96 [ 129.147122] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 129.147135] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 129.147160] entry_SYSCALL_64_fastpath+0x94/0x96 [ 129.147167] RIP: 0033:0x4529d9 [ 129.147172] RSP: 002b:00007fae087e1c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000003 [ 129.147180] RAX: 0000000000000000 RBX: 0000000000758020 RCX: 00000000004529d9 [ 129.147185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000013 [ 129.147189] RBP: 0000000000000048 R08: 0000000000000000 R09: 0000000000000000 [ 129.147195] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed760 [ 129.147199] R13: 0000000000000014 R14: 00007fae087e26d4 R15: ffffffffffffffff [ 129.163550] binder: 15937:15952 got reply transaction with bad transaction stack, transaction 367 has target 15937:0 [ 129.163564] binder: 15937:15952 transaction failed 29201/-71, size 32-8 line 2685 [ 129.178092] binder: 15943 RLIMIT_NICE not set [ 129.180258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 129.182122] binder: 15943 RLIMIT_NICE not set [ 129.182567] binder: 15935:15943 ioctl c0306201 2000dfd0 returned -14 [ 129.197262] binder: undelivered TRANSACTION_COMPLETE [ 129.197277] binder: undelivered TRANSACTION_COMPLETE [ 129.197285] binder: undelivered transaction 370 [ 129.210356] binder: 15935:15943 ERROR: BC_REGISTER_LOOPER called without request [ 129.210372] binder: 15943 RLIMIT_NICE not set [ 129.212169] binder: 15935:15955 unknown command 0 [ 129.212180] binder: 15935:15955 ioctl c0306201 20004000 returned -22 [ 129.212294] binder: BINDER_SET_CONTEXT_MGR already set [ 129.212303] binder: 15937:15964 ioctl 40046207 0 returned -16 [ 129.213424] binder: 15935:15955 ioctl c0306201 2000dfd0 returned -14 [ 129.213695] binder_alloc: 15937: binder_alloc_buf, no vma [ 129.213722] binder: 15937:15964 transaction failed 29189/-3, size 0-0 line 2870 [ 129.213793] binder: 15937:15952 ERROR: BC_REGISTER_LOOPER called without request [ 129.213806] binder: 15952 RLIMIT_NICE not set [ 129.222397] binder: 15937:15952 got reply transaction with no transaction stack [ 129.222408] binder: 15937:15952 transaction failed 29201/-71, size 32-8 line 2670 [ 129.223917] device lo entered promiscuous mode [ 129.232196] device lo left promiscuous mode [ 129.232227] FAULT_INJECTION: forcing a failure. [ 129.232227] name failslab, interval 1, probability 0, space 0, times 0 [ 129.232239] CPU: 0 PID: 15968 Comm: syz-executor6 Not tainted 4.15.0-rc2+ #208 [ 129.232245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.232249] Call Trace: [ 129.232264] dump_stack+0x194/0x257 [ 129.232283] ? arch_local_irq_restore+0x53/0x53 [ 129.232298] ? kernel_text_address+0x102/0x140 [ 129.232337] should_fail+0x8c0/0xa40 [ 129.232358] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 129.232385] ? save_stack+0xa3/0xd0 [ 129.232398] ? save_stack+0x43/0xd0 [ 129.232406] ? kasan_kmalloc+0xad/0xe0 [ 129.232413] ? kasan_slab_alloc+0x12/0x20 [ 129.232424] ? kmem_cache_alloc_node+0x144/0x760 [ 129.232434] ? __alloc_skb+0xf1/0x780 [ 129.232442] ? rtmsg_ifinfo_build_skb+0x73/0x190 [ 129.232449] ? rtmsg_ifinfo_event.part.26+0x41/0xd0 [ 129.232456] ? rtmsg_ifinfo+0x72/0x90 [ 129.232464] ? __dev_notify_flags+0x2c5/0x430 [ 129.232471] ? __dev_set_promiscuity+0x19e/0x630 [ 129.232479] ? dev_set_promiscuity+0x51/0xc0 [ 129.232488] ? packet_dev_mc+0x147/0x280 [ 129.232496] ? packet_release+0x574/0xce0 [ 129.232506] ? sock_release+0x8d/0x1e0 [ 129.232514] ? sock_close+0x16/0x20 [ 129.232521] ? __fput+0x333/0x7f0 [ 129.232528] ? ____fput+0x15/0x20 [ 129.232536] ? task_work_run+0x199/0x270 [ 129.232545] ? exit_to_usermode_loop+0x296/0x310 [ 129.232553] ? syscall_return_slowpath+0x490/0x550 [ 129.232561] ? entry_SYSCALL_64_fastpath+0x94/0x96 [ 129.232578] ? check_noncircular+0x20/0x20 [ 129.232600] ? print_usage_bug+0x3f0/0x3f0 [ 129.232614] ? find_held_lock+0x39/0x1d0 [ 129.232671] should_failslab+0xec/0x120 [ 129.232688] kmem_cache_alloc_node_trace+0x5a/0x760 [ 129.232732] __kmalloc_node_track_caller+0x33/0x70 [ 129.232751] __kmalloc_reserve.isra.41+0x41/0xd0 [ 129.232773] __alloc_skb+0x13b/0x780 [ 129.232794] ? skb_copy_and_csum_dev+0x360/0x360 [ 129.232813] ? if_nlmsg_size+0x77a/0xa40 [ 129.232832] ? br_fill_ifinfo+0xc10/0xc10 [ 129.232843] ? nla_put_ifalias+0x160/0x160 [ 129.232864] ? do_raw_spin_trylock+0x190/0x190 [ 129.232890] ? mark_held_locks+0xb2/0x100 [ 129.232911] rtmsg_ifinfo_build_skb+0x73/0x190 [ 129.232935] rtmsg_ifinfo_event.part.26+0x41/0xd0 [ 129.232955] rtmsg_ifinfo+0x72/0x90 [ 129.232974] __dev_notify_flags+0x2c5/0x430 [ 129.232990] ? dev_change_name+0xbd0/0xbd0 [ 129.233002] ? vprintk_default+0x28/0x30 [ 129.233016] ? vprintk_func+0x5e/0xc0 [ 129.233030] ? printk+0xaa/0xca [ 129.233041] ? show_regs_print_info+0x65/0x65 [ 129.233060] ? rtnl_kfree_skbs+0x70/0x70 [ 129.233095] __dev_set_promiscuity+0x19e/0x630 [ 129.233103] ? __dev_set_promiscuity+0x19e/0x630 [ 129.233120] ? __dev_notify_flags+0x430/0x430 [ 129.233141] ? lock_release+0xda0/0xda0 [ 129.233147] ? check_noncircular+0x20/0x20 [ 129.233163] ? refcount_sub_and_test+0x115/0x1b0 [ 129.233179] ? do_raw_spin_trylock+0x190/0x190 [ 129.233200] dev_set_promiscuity+0x51/0xc0 [ 129.233218] packet_dev_mc+0x147/0x280 [ 129.233234] packet_release+0x574/0xce0 [ 129.233262] ? packet_set_ring+0x1b10/0x1b10 [ 129.233274] ? perf_trace_lock+0x900/0x900 [ 129.233301] ? __lock_is_held+0xbc/0x140 [ 129.233318] ? perf_trace_lock+0xd6/0x900 [ 129.233329] ? locks_remove_file+0x3fa/0x5a0 [ 129.233346] ? fcntl_setlk+0x10d0/0x10d0 [ 129.233355] ? fsnotify+0x7b3/0x1140 [ 129.233406] sock_release+0x8d/0x1e0 [ 129.233415] ? sock_release+0x8d/0x1e0 [ 129.233429] ? sock_release+0x1e0/0x1e0 [ 129.233437] sock_close+0x16/0x20 [ 129.233446] __fput+0x333/0x7f0 [ 129.233465] ? fput+0x140/0x140 [ 129.233477] ? _raw_spin_unlock_irq+0x27/0x70 [ 129.233496] ____fput+0x15/0x20 [ 129.233509] task_work_run+0x199/0x270 [ 129.233529] ? task_work_cancel+0x210/0x210 [ 129.233547] ? exit_to_usermode_loop+0x8c/0x310 [ 129.233577] exit_to_usermode_loop+0x296/0x310 [ 129.233602] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 129.233624] ? __close_fd+0x222/0x360 [ 129.233644] syscall_return_slowpath+0x490/0x550 [ 129.233656] ? prepare_exit_to_usermode+0x340/0x340 [ 129.233663] ? SyS_write+0x184/0x220 [ 129.233674] ? entry_SYSCALL_64_fastpath+0x69/0x96 [ 129.233691] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 129.233705] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 129.233735] entry_SYSCALL_64_fastpath+0x94/0x96 [ 129.233743] RIP: 0033:0x4529d9 [ 129.233748] RSP: 002b:00007fae087c0c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000003 [ 129.233758] RAX: 0000000000000000 RBX: 00000000007580d8 RCX: 00000000004529d9 [ 129.233763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000013 [ 129.233768] RBP: 0000000000000048 R08: 0000000000000000 R09: 0000000000000000 [ 129.233773] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed760 [ 129.233778] R13: 0000000000000014 R14: 00007fae087c16d4 R15: ffffffffffffffff [ 129.252096] binder: release 15935:15955 transaction 374 out, still active [ 129.252165] binder: send failed reply for transaction 374, target dead [ 129.282708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 129.316806] binder: 15978:15985 ERROR: BC_REGISTER_LOOPER called without request [ 129.316821] binder: 15985 RLIMIT_NICE not set [ 129.322774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 129.360445] device lo entered promiscuous mode [ 129.361938] binder_alloc: 15978: binder_alloc_buf, no vma [ 129.361966] binder: 15978:15990 transaction failed 29189/-3, size 0-0 line 2870 [ 129.363120] device lo left promiscuous mode [ 129.377885] binder: 15978:15990 ioctl c0306201 2000dfd0 returned -14 [ 129.400511] binder: 15978:15996 ERROR: BC_REGISTER_LOOPER called without request [ 129.400524] binder: 15996 RLIMIT_NICE not set [ 129.400600] binder: BINDER_SET_CONTEXT_MGR already set [ 129.400609] binder: 15978:15990 ioctl 40046207 0 returned -16 [ 129.414905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 129.430843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2017/12/05 13:37:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:20 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f00005b4000/0x2000)=nil, 0x2000, 0x2, 0x40110, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000001000-0x2c)=[@register_looper={0x630b}, @increfs={0x40046304, 0x83}, @acquire_done={0x40046307, 0x0, 0x0}, @acquire={0x40046305, 0x4}, @register_looper={0x630b}, @increfs={0x40046304, 0x1}, @register_looper={0x630b}, @register_looper={0x630b}], 0xb3, 0x0, &(0x7f00005b5000)="554d8a2bd0f47db30cafc8128c07ff7f3f4892c446b82cc11ad0f122a5b3d123a15630ae62c19171931377f10c4dadd84b8b114128acab784ebb3a5ed913735099e4b9b5ff6a532ca18eb38c801c75fe672ea5b161e6f88bf413459545f1b721e7b1d67086fd3dd56475140cba366995f913becbf9a593e6ba879da53ce4ba373d634df172d636b47816090ba39901f7be86f0a5285737750f0a9616862f120f29d979e2b14fbee94bcecd930b0a7646a5f710"}) mmap(&(0x7f00008db000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, r0, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x200000000003) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xa) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000816000)={0x0, 0x0, &(0x7f0000001000-0xc)=[], 0x0, 0x0, &(0x7f0000000000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000001000)={0x4, 0x0, &(0x7f00004f0000)=[@exit_looper={0x630d}], 0x0, 0x0, &(0x7f00004f1000-0x2c)=""}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000002000)=[], 0x1000, 0x0, &(0x7f0000003000-0x1000)="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"}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000)={r2, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x1c, 0x0, &(0x7f0000003000)=[@release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @register_looper={0x630b}, @release={0x40046306, 0x4}], 0xc5, 0x0, &(0x7f00005b5000)="1340da5f19215beb3eeae2a8aa2f8530e179c5d7c53f51c1dc2b6cc3dde7b1a100f11580174e62dc516ffe19a330120fb9dad0b7c4ade1a7c5747a999962d3fe0318d37d333674937f26f0a20bba08251e7934414dc6d8ee43ee880344741ea585ecdeafd265703625296dca1383776c40060792e0786f12d0bdbb62a37560d6a866aa9e1e132eebd2ab5bb0a533a6f1700dc3e5340a68e517fbcff8e36b28b4684649bcb3d86c1c38ab7dcd70641da07a5872698ebab59a01d7540e386b953a3159f7e88e"}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000004000)="2f6465762f62696e6465722300", 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00008dc000-0x18)={r3, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x100000001) 2017/12/05 13:37:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00007c5000)={0x0, 0x0}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000434000)={0x6003, 0x115000, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r1, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r1, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) sendto$inet(r0, &(0x7f00001bc000)="9965498953e96652191d234f5bcc9bbb3162a75ab370940053d362", 0x1b, 0x0, &(0x7f0000943000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r2 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f000053d000-0xc)={0x0, 0x7, 0x0}, &(0x7f0000bcb000-0x4)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00002d6000)={r3, @in={{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xa735, 0x80000000}, 0x98) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r2 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r2, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000194000-0x1)="", 0x0, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) read(r0, &(0x7f0000d91000)="00", 0x1) shutdown(r0, 0x4000000000001) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006e8000)="2f6465762f72666b696c6c00", 0x400002, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000061000-0xfd)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000015d000-0x4)=0xfd) pipe(&(0x7f000098e000-0x8)={0x0, 0x0}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x5) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x100000001) ioctl$TIOCGSID(r3, 0x540f, &(0x7f0000f4f000-0x4)=0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00009d5000-0x4)=0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f000059b000-0xc)={r2, r3, 0x101}) 2017/12/05 13:37:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000fef000)="4900002933605d0a378666f1333a8fa2b1e80f84c72db2205edf913f99b781482293b0f12516a9eb5102a254d2cb9c088ecd2a3b6e", 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000014a000-0x4)=0x0) setsockopt$inet_udp_int(r1, 0x11, 0x62, &(0x7f0000377000-0x4)=0x4, 0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00008ae000)={0x3, 0xffffffffffffffff, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000bfb000-0x4)=0x7d114077) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000de9000-0x11)="2f6465762f7161745f6164665f63746c00", 0x1, 0x0) unshare(0x800001) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:20 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) open$dir(&(0x7f00003df000)="2e2f66696c653000", 0xfffffffffffffffd, 0x35) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x3, 0x4000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() openat$kvm(0xffffffffffffff9c, &(0x7f000002c000)="2f6465762f6b766d00", 0x0, 0x0) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 130.428897] binder: 15941 RLIMIT_NICE not set [ 130.433569] binder: release 15937:15941 transaction 367 in, still active [ 130.440471] binder: send failed reply for transaction 367 to 15937:15952 [ 130.447378] binder: undelivered TRANSACTION_COMPLETE [ 130.454317] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.463308] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/05 13:37:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vcsa(&(0x7f00003d0000)="2f6465762f766373612300", 0x100, 0x44000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f000010c000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 130.475522] binder: 16001:16011 ERROR: BC_REGISTER_LOOPER called without request [ 130.475541] binder: 16001:16011 IncRefs 0 refcount change on invalid ref 131 ret -22 [ 130.475555] binder: 16001:16011 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 130.475562] binder: 16001:16011 unknown command 0 2017/12/05 13:37:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000c0e000-0x8)={0x0, 0x0}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000a19000-0x4)=0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fe9000-0x11)="2f6465762f7667615f6172626974657200", 0x4000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000e3d000-0x8)={0x3, 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f0000194000-0x1)="", 0x0, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r2, 0x4, 0x2000) read(r2, &(0x7f0000d91000)="00", 0x1) shutdown(r2, 0x4000000000001) [ 130.475572] binder: 16001:16011 ioctl c0306201 20000000 returned -22 [ 130.478980] binder: 16001:16011 ioctl c0046209 20001000 returned -22 [ 130.492717] binder: 16010:16012 ERROR: BC_REGISTER_LOOPER called without request [ 130.492732] binder: 16012 RLIMIT_NICE not set 2017/12/05 13:37:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000fef000)="4900002933605d0a378666f1333a8fa2b1e80f84c72db2205edf913f99b781482293b0f12516a9eb5102a254d2cb9c088ecd2a3b6e", 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000014a000-0x4)=0x0) setsockopt$inet_udp_int(r1, 0x11, 0x62, &(0x7f0000377000-0x4)=0x4, 0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00008ae000)={0x3, 0xffffffffffffffff, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000bfb000-0x4)=0x7d114077) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000de9000-0x11)="2f6465762f7161745f6164665f63746c00", 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000a26000)="2f6465762f73657175656e63657200", 0x402000, 0x0) getsockname(r0, &(0x7f000036e000)=@hci={0x0, 0x0, 0x0}, &(0x7f000030d000)=0x6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) getpeername$packet(r1, &(0x7f0000b49000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000794000-0x4)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) r4 = socket$nfc_raw(0x27, 0x3, 0x0) bind$bt_sco(r1, &(0x7f0000a12000)={0x1f, {0xffffffffffff7fff, 0xff, 0x4, 0x8001, 0x8000, 0x7}}, 0x8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000c41000-0xf8)={{0x0, 0x0, 0x2, 0x2, 0x6}, 0x4, 0x800, "69643100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "74696d6572300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x8, 0x80, 0x23d9e80c, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00006b5000-0x8)={0x0, 0x0}) r5 = request_key(&(0x7f0000d22000-0x8)="72787270635f7300", &(0x7f000043d000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000602000-0x2)="2d00", 0xfffffffffffffffb) add_key(&(0x7f0000c05000)="706b6373375f7465737400", &(0x7f0000b57000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000833000)="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", 0xfd, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) setsockopt$inet6_tcp_buf(r1, 0x6, 0x20000000001a, &(0x7f00005e2000-0x91)="9e012452ccbb1f0d7257c25a7b9248bc764899c7fd9569a1e0dfe1a096f33e145d9752a3e8cce810219e4a5f0c59e54e9cc8c2432522194d4154c8763ec6f92e0bbbc44deef902fbe3ffea66743c6765d8cc80a96736cf6ad66e713ad9ac9a3c7b4cb35af3e4461ec1cc06a9521038a6f1988ff116457727cb3249226b0622057106a0ea1692308c20b480635a4b9f7418", 0x91) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000372000-0x18)={0x0, 0x3, 0xff00000000000000, &(0x7f0000aae000-0x8)=0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000729000-0x10)={r3, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r4) [ 130.520051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 130.540777] device lo entered promiscuous mode [ 130.540988] device lo left promiscuous mode [ 130.542067] binder: 16012 RLIMIT_NICE not set [ 130.550228] binder: 16001:16020 ioctl c0306201 20003000 returned -14 [ 130.554201] binder: 16001:16020 ioctl c018620b 208dbfe8 returned -14 2017/12/05 13:37:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000194000-0x1)="", 0x0, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) read(r0, &(0x7f0000d91000)="00", 0x1) shutdown(r0, 0x4000000000001) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000b52000-0x4)=0x0) 2017/12/05 13:37:21 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) open$dir(&(0x7f00003df000)="2e2f66696c653000", 0xfffffffffffffffd, 0x35) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x3, 0x4000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000512000)=@assoc_value={r2, 0x2}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 130.555402] binder: 16001:16020 ioctl 40046205 100000001 returned -22 [ 130.564911] binder: 16012 RLIMIT_NICE not set [ 130.572715] binder: 16026:16028 ERROR: BC_REGISTER_LOOPER called without request [ 130.572727] binder: 16028 RLIMIT_NICE not set [ 130.585922] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/05 13:37:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = creat(&(0x7f0000bfb000)="2e2f66696c653000", 0x41) open_by_handle_at(r1, &(0x7f00007b0000-0x38)={0x38, 0x5, "154195c207e156518d30456827ae8aa451297e566b9b0e4a241bffc95d65a91481c7b179a1b209bc1fbdd5bd132b5fff"}, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8) sendto$inet(r0, &(0x7f000026b000-0x1)="00", 0x1, 0x40400c5, &(0x7f0000705000)={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00007b2000-0x44)={{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, {0x2, 0x0, @rand_addr=0x100000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="6970365f767469300000000000000000"}) read(r0, &(0x7f0000d91000)="00", 0x1) r2 = memfd_create(&(0x7f000063f000-0x10)="6d696d655f74797065766d6e65743100", 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000873000)={0x0, 0x3c, &(0x7f0000d73000)=[@in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x9, @loopback={0x0, 0x1}, 0x20}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000f74000)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00005c5000)=@int=0xffffffffffffffff, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000feb000)={r2, &(0x7f00009e8000-0x79)="3ff1de991aa1483c317a6cd7d8d34e683a24d1fedb3518fc4092a666357d771e9edac2df914235cc9f328e0757564d118511437bd93f08c8dd154982e4280b5f804cc1af88dd6a0aede69bb3417bd2292419627374b33c8438aeb9ed7e14c6cc67a69e65e15461786d1248ee5119de6cb5845659b28c99cf32", &(0x7f0000686000-0x9a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x18) shutdown(r2, 0x4000000001001) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000727000)=0x0) ioctl$TIOCEXCL(r2, 0x540c) 2017/12/05 13:37:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r2 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r2, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 130.585933] binder: 16010:16022 ioctl 40046207 0 returned -16 [ 130.587523] binder_alloc: 16010: binder_alloc_buf, no vma 2017/12/05 13:37:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r2 = socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00005b7000-0x4)=0x7, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f000054c000-0xa)="2f6465762f6375736500", 0x400000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00008f5000-0xc)={0x0, 0x0, 0x0}, &(0x7f00006c2000)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f000084b000)={{{@in=@rand_addr=0x4b42, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2, 0x9, 0x0, 0x8, 0x3, 0xa0, 0xa0, 0xea2, r1, r4}, {0x0, 0xd000, 0xffffffff, 0xdee, 0xeb, 0x1f, 0xffffffff80000000, 0x2}, {0x800, 0x7, 0x9, 0x3}, 0x8, 0x1, 0x80200000000000, 0x1, 0x12, 0x1}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x4e9, 0x9}, 0x0, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x140, 0x2, 0x0, 0xf69e, 0x9, 0x8000, 0x5}}, 0xe8) accept4$ipx(r2, 0x0, &(0x7f0000a24000)=0x0, 0x80800) close(r0) 2017/12/05 13:37:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000fef000)="4900002933605d0a378666f1333a8fa2b1e80f84c72db2205edf913f99b781482293b0f12516a9eb5102a254d2cb9c088ecd2a3b6e", 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000014a000-0x4)=0x0) setsockopt$inet_udp_int(r1, 0x11, 0x62, &(0x7f0000377000-0x4)=0x4, 0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00008ae000)={0x3, 0xffffffffffffffff, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000bfb000-0x4)=0x7d114077) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000194000-0x1)="", 0x0, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) read(r0, &(0x7f0000d91000)="00", 0x1) shutdown(r0, 0x4000000000001) [ 130.587550] binder: 16010:16022 transaction failed 29189/-3, size 0-0 line 2870 [ 130.587636] binder: 16010:16012 ERROR: BC_REGISTER_LOOPER called without request 2017/12/05 13:37:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000512000)=@assoc_value={r2, 0x2}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 130.587650] binder: 16012 RLIMIT_NICE not set [ 130.594047] device lo entered promiscuous mode [ 130.594773] binder: 16010:16012 got reply transaction with no transaction stack [ 130.594784] binder: 16010:16012 transaction failed 29201/-71, size 32-8 line 2670 [ 130.606694] device lo left promiscuous mode [ 130.608571] binder: 16028 RLIMIT_NICE not set [ 130.611922] binder: 16026:16028 got reply transaction with no transaction stack [ 130.611934] binder: 16026:16028 transaction failed 29201/-71, size 32-8 line 2670 [ 130.645848] binder: BINDER_SET_CONTEXT_MGR already set [ 130.645860] binder: 16038:16039 ioctl 40046207 0 returned -16 [ 130.646091] binder: 16038:16039 ERROR: BC_REGISTER_LOOPER called without request [ 130.646103] binder: 16039 RLIMIT_NICE not set [ 130.646269] binder: 16001:16020 ioctl c0306201 20003000 returned -14 [ 130.654423] binder: 16001:16032 ioctl c018620b 208dbfe8 returned -14 [ 130.674858] binder_alloc: 16010: binder_alloc_buf, no vma [ 130.674887] binder: 16038:16048 transaction failed 29189/-3, size 0-0 line 2870 [ 130.693453] binder_alloc: binder_alloc_mmap_handler: 16026 20000000-20002000 already mapped failed -16 [ 130.696097] binder: BINDER_SET_CONTEXT_MGR already set [ 130.696109] binder: 16026:16035 ioctl 40046207 0 returned -16 [ 130.705346] binder: 16026:16046 ERROR: BC_REGISTER_LOOPER called without request [ 130.705359] binder: 16046 RLIMIT_NICE not set [ 130.706615] binder: 16026:16035 got new transaction with bad transaction stack, transaction 387 has target 16026:16028 [ 130.706634] binder: 16026:16035 transaction failed 29201/-71, size 0-0 line 2782 [ 130.707888] device lo entered promiscuous mode [ 130.721317] binder: BINDER_SET_CONTEXT_MGR already set [ 130.721330] binder: 16038:16048 ioctl 40046207 0 returned -16 [ 130.721378] binder: 16038:16057 ERROR: BC_REGISTER_LOOPER called without request [ 130.721389] binder: 16057 RLIMIT_NICE not set [ 130.722667] binder_alloc: 16010: binder_alloc_buf, no vma [ 130.722701] binder: 16038:16048 transaction failed 29189/-3, size 0-0 line 2870 [ 130.724788] binder: 16038:16057 got reply transaction with no transaction stack [ 130.724796] binder: 16038:16057 transaction failed 29201/-71, size 32-8 line 2670 [ 130.749970] device lo left promiscuous mode [ 130.781720] binder: BINDER_SET_CONTEXT_MGR already set [ 130.781730] binder: 16062:16063 ioctl 40046207 0 returned -16 [ 130.781832] binder: 16062:16063 ERROR: BC_REGISTER_LOOPER called without request [ 130.781843] binder: 16063 RLIMIT_NICE not set [ 130.792756] binder: BINDER_SET_CONTEXT_MGR already set [ 130.792767] binder: 16065:16067 ioctl 40046207 0 returned -16 [ 130.792935] binder: 16065:16067 ERROR: BC_REGISTER_LOOPER called without request [ 130.792948] binder: 16067 RLIMIT_NICE not set [ 130.817683] device lo entered promiscuous mode [ 130.819861] device lo left promiscuous mode [ 130.820302] binder_alloc: 16010: binder_alloc_buf, no vma [ 130.820330] binder: 16065:16081 transaction failed 29189/-3, size 0-0 line 2870 [ 130.847845] binder_alloc: binder_alloc_mmap_handler: 16062 20000000-20002000 already mapped failed -16 [ 130.852542] binder: BINDER_SET_CONTEXT_MGR already set [ 130.852553] binder: 16062:16078 ioctl 40046207 0 returned -16 [ 130.852599] binder: 16062:16084 ERROR: BC_REGISTER_LOOPER called without request [ 130.852609] binder: 16084 RLIMIT_NICE not set [ 130.852675] device lo entered promiscuous mode [ 130.872204] device lo left promiscuous mode [ 130.918805] binder: BINDER_SET_CONTEXT_MGR already set [ 130.918816] binder: 16065:16081 ioctl 40046207 0 returned -16 [ 130.918858] binder: 16065:16088 ERROR: BC_REGISTER_LOOPER called without request [ 130.918868] binder: 16088 RLIMIT_NICE not set [ 130.920140] binder_alloc: 16010: binder_alloc_buf, no vma [ 130.920170] binder: 16065:16081 transaction failed 29189/-3, size 0-0 line 2870 [ 130.922727] binder: 16065:16088 got reply transaction with no transaction stack [ 130.922735] binder: 16065:16088 transaction failed 29201/-71, size 32-8 line 2670 [ 131.196348] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.202323] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/05 13:37:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000a53000-0xc)="2f6465762f6175746f667300", 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000e78000)={0x0, 0x7ff, 0x9, 0x80000000}, &(0x7f000059d000-0x4)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000081000-0xa0)={r2, @in6={{0xa, 0x3, 0x400, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x3, 0x1, 0x7, 0x20}, 0xa0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r3, 0x0}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000ea5000-0x4)=0x0) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:21 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) open$dir(&(0x7f00003df000)="2e2f66696c653000", 0xfffffffffffffffd, 0x35) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x3, 0x4000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000194000-0x1)="", 0x0, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00005b1000)=0x0) read(r0, &(0x7f0000d91000)="00", 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000189000-0x4)=0x0) shutdown(r0, 0x4000000000001) r1 = syz_open_dev$sg(&(0x7f000089a000-0x9)="2f6465762f73672300", 0x7d, 0x60) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000ef0000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000e12000)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00003ca000)={r2, 0x1}, &(0x7f0000c17000)=0x8) 2017/12/05 13:37:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000512000)=@assoc_value={r2, 0x2}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$mouse(&(0x7f0000ff1000)="2f6465762f696e7075742f6d6f7573652300", 0x1f73, 0x100) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00007e5000)={0x10000000, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000d1e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000fef000)="4900002933605d0a378666f1333a8fa2b1e80f84c72db2205edf913f99b781482293b0f12516a9eb5102a254d2cb9c088ecd2a3b6e", 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000014a000-0x4)=0x0) setsockopt$inet_udp_int(r1, 0x11, 0x62, &(0x7f0000377000-0x4)=0x4, 0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00008ae000)={0x3, 0xffffffffffffffff, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 131.207826] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.224579] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.228232] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/05 13:37:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x4}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000091000)={0x2, 0x0, @rand_addr=0x283, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000194000-0x1)="", 0x0, 0x2000c800, &(0x7f0000dc2000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) read(r0, &(0x7f0000d91000)="00", 0x1) shutdown(r0, 0x4000000000001) 2017/12/05 13:37:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:21 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) open$dir(&(0x7f00003df000)="2e2f66696c653000", 0xfffffffffffffffd, 0x35) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x3, 0x4000) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 131.228243] binder: 16091:16094 ioctl 40046207 0 returned -16 [ 131.228339] binder: 16091:16094 ERROR: BC_REGISTER_LOOPER called without request [ 131.228351] binder: 16094 RLIMIT_NICE not set [ 131.268747] binder_alloc: 16026: binder_alloc_buf, no vma 2017/12/05 13:37:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000fef000)="4900002933605d0a378666f1333a8fa2b1e80f84c72db2205edf913f99b781482293b0f12516a9eb5102a254d2cb9c088ecd2a3b6e", 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000014a000-0x4)=0x0) setsockopt$inet_udp_int(r1, 0x11, 0x62, &(0x7f0000377000-0x4)=0x4, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x9, 0x0, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) close(r0) 2017/12/05 13:37:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r2 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r2, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000512000)=@assoc_value={r2, 0x2}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x29f, &(0x7f0000e97000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, "43f0ca", 0x269, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x7, [0x0, 0x0, 0x0], {0x3, 0x6, "c8854e", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, [@dstopts={0x32, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @routing={0x3f, 0x0, 0x3, 0x4, 0x1, []}, @dstopts={0x0, 0x25, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x5, 0x38, "93c80381ae7f0eea12e76b1fbe8538249e3c86feb5640ae80237b2e45ca802c19b92703b399bcc2c5a6704eb66e3c951ade8eae50a22a692"}, {0xff, 0x1c, "7a1f469a6db7e91fae9b7e25dd766cc10a7cc62e5e0528959282a28b"}, {0x7, 0xd5, "1a28dc7b591a28737897ab4e6bed8c64ee3a54f5b3ee25b8904f007feda15c1a8c0fef5dd8e0c902ff53fd42af9348e7ac7483ab316e1a9216876cb6ec971d1e68e056628ca430775f972a6f57c23b806ceaf2e74cecea4d6573de06094ceb690a4c11238f6714c20bdc737013b3a733b1ccce54e05fe14221853c077aeb84b83394794e466ee9c8454f8783d3233e8fba72e71e6973d5f6f247d28a43234c0213b300d67a8326ed17ec4d545386d40839e42d1b4a7e07b68219998c2101f644a26fae30d04700be3d56d7ae6bf0904d5018ed764d"}]}, @routing={0x0, 0x4, 0x1, 0x8004, 0x80000000, [@loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}]}], "68a714450198ebfd8737b42f1c3217db042e46cdbc64b330e996c7c40b6484c2a75f51ff549d5ed10c843e7020a4f3dc0feae5d33663f96a6726bce2461120a1e3ebb4a394a889e83f8fa6aafc00ae2cd968723446a1212eb424655c9effa96a0b87c2c7fd10e80689a867c37fe2ba8d28ef22ceb53a693ed6e9ce2de266cf95f6ce874c93e09ff0f11471d438c551ba819dee49b6646cdb22a37b95e540081ab435059c121b80621bd859d5b62fff70e08bff7e3b2ab291c25d4201b57667dbdc61cb9733cab3052315"}}}}}}}, 0x0) r0 = gettid() perf_event_open(&(0x7f0000934000-0x78)={0x2, 0x78, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x18000000000, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000a4e000)="2f6465762f76637300", 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000cf7000)={0x5, 0x0, 0x10003, 0x1000}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000f27000)={0x8416, r2}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000e25000)=0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000ae9000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000073b000)={0x2, 0x78, 0x1, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0xf7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000e2d000-0x78)={0x2, 0x78, 0x50000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200000000, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xe8, &(0x7f0000316000-0xe8)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x20086dd, @x25={0x0, 0x4000000000000080, 0xfd, "e2aef756d30a113d8e302ca5101b158529cfa9de50fcc07675e962323877f21689daa1ee371ec57d8810f8468b372f0743a41ea1d6ea1ec24008f8de60ae01085ece9fbae51423046e6aac1b4333ee7c6c2d016f26a216f0fdc2aed12ace1fb24bb1e1ee7892b21342b72c8be39385ac8fee21627afd87c3b408df4a13129640441844c0d1bc10e08cf839fa7cc7c54e31837a554837c5a3cdcea667b48fe718af2349b4826719198e1422c5d27d37941467651c771a6e06daf9908a17499bfc84314a85154f6deefa78521a0c37c70466543466043a26"}}}}, 0x0) r4 = openat(r1, &(0x7f00009f2000)="2e2f66696c653000", 0x43, 0x2) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x2, 0x41000, 0xfffffffffffffffe, 0x7, 0x1, 0x0, 0x100, 0x0, 0xfffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xa00000002, 0xfffffffffffffffd, 0x80000001, 0x3, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x400400002, r4, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000804000)=0x0, &(0x7f0000ac5000)=0x4) mount(&(0x7f0000144000)="2e2f66696c653000", &(0x7f00009f7000-0x8)="2e2f66696c653000", &(0x7f000057c000-0x4)="6e667300", 0x0, &(0x7f000000a000)="") openat$sequencer(0xffffffffffffff9c, &(0x7f00007c1000)="2f6465762f73657175656e63657200", 0xfffffffffffffffc, 0x0) perf_event_open(&(0x7f0000813000)={0x2, 0x78, 0x10000000e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xd) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000e01000)="0000", &(0x7f0000abb000-0x4)=0x2) r5 = socket(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f0000ee1000)={&(0x7f00002bb000)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000028000)=[{&(0x7f00005cd000)="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", 0x1000}, {&(0x7f0000140000-0xbc)="636c92a700851930c807d8379ef64708cee4125e4dde13347abdb52ee050334cb0ce34dcc756d9233cfd91277d941512efd69e549b161e810bbb4b1dc2285de275446491709e84a109bfa765d584222b3933e52ef3bbd52ac37ae41c744656b78565a342fde85e2378389cca7090644c6d47de3d002fc4fd1d67485c5a056ea1359875a621dba3bd081ee1620f3e46c7e4b1d7d296ae10160800ac06ab579909608386c655bd9e2f5d96d6abc3764e19cc933145c31812c215b9fb96", 0xbc}, {&(0x7f0000dbe000)="36dea2066a3dd1e324030a7ae895e8ef12ececce1b6e8849ae", 0x19}], 0x3, &(0x7f0000f2c000-0x220)=[{0x88, 0x119, 0x7, "a4f2d8ac4bd5d6274a0cdb5f125ed3829e6e4139754c755080503141ea9fa85cf18a5a4003322d0d9e0a7a4f9efda1cc9de1b877fb8959ceddc32e9409ed5576d5821a00241660f5984342422b1f0f0971bf9f9dd07378b02f8b1f7c972e4721097ac2a25a2e9b594b1b95ad5e878d936a49fa"}, {0xc8, 0x11, 0x3, "ba98df08abb81578d59249c3c5cecb8db0d2c2375a5e82f77a066960f1bc1fbcfdd069fc3e6eedde6a3cfd4b1a756158fbe4749f9f5ed03133c0fdae2bf761fb28147089c942ebacef4ea0cc8cdf9c2721aba59f7e5e99a275da3f9c7b6e5acfd68d6fc7e6dabd4fa2c759e2692fcf79d0f79861547ef8238800cb7ab695276b4f0041dd036ada900e5870e2f4636c812df3d75d8aa7cda70355bdb5da1076f5776cc6f029e0ac846823dff263e3c70b752fe3d64f"}, {0xd0, 0x115, 0xf000000000, "f420aafcbde05ea93af8687d874372da2a0692e3b49bdc672433638d70eef4ba20cba5575042e14392899e7c5887358cfbc3907137260eedd69cdf644c5db536bf2b8ab151ac9f45b1b2457678cd7370c7bf58de05c6470a6f10199eff088b41fa40cc707572ce185a05760f3d2a7748ee2c259c516322cece6de9fffffffea2494a23c28a0a6518eef069002225750d30e4cf1ffa711292919eb4ea03ffff80011530e2aa06e9531840cb406b77361eeac9cd547cf2e8186d7bbe0decd797b1"}], 0x220, 0x4004}, 0x4048045) removexattr(&(0x7f00007ab000)="2e2f66696c653000", &(0x7f0000dda000-0x17)=@random={"73797374656d2e00", "2f6465762f73657175656e63657200"}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00005e4000)={0x4, 0x4, 0x5, 0x401}, 0x10) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000edc000)=@get={0x1, &(0x7f0000f2b000-0xc6)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000d4f000-0x8)={r5, 0xffffffffffffffff}) write(r5, &(0x7f0000e95000-0x10)="020a7c0202000000090500d91dfb3700", 0x10) mknodat(r4, &(0x7f00006b0000)="2e2f66696c653000", 0x10, 0xd39) 2017/12/05 13:37:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000b80000)={0x0, 0x0, @remote={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000008a000-0x1)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000aa000-0x8)={0x0, 0x3}, &(0x7f000094d000)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000929000)={r2, 0x1, 0x0, 0x0}, &(0x7f000068a000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r3, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000250000-0x11)="2f6465762f7161745f6164665f63746c00", 0x648400, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000567000)=0x0, &(0x7f00006b8000-0x4)=0x4) [ 131.268780] binder: 16091:16109 transaction failed 29189/-3, size 0-0 line 2870 [ 131.276450] binder: 16091:16109 ioctl c0306201 2000dfd0 returned -14 2017/12/05 13:37:21 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) open$dir(&(0x7f00003df000)="2e2f66696c653000", 0xfffffffffffffffd, 0x35) socket$inet_tcp(0x2, 0x1, 0x0) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 131.289266] device lo entered promiscuous mode [ 131.291493] device lo left promiscuous mode [ 131.308834] device lo entered promiscuous mode [ 131.325145] binder: BINDER_SET_CONTEXT_MGR already set [ 131.325159] binder: 16091:16109 ioctl 40046207 0 returned -16 [ 131.327489] binder: 16091:16117 ERROR: BC_REGISTER_LOOPER called without request 2017/12/05 13:37:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000384000)=0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f000051e000-0x4)=r1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000729000-0x10)={r3, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r2) 2017/12/05 13:37:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000d72000-0x6)={r1, 0x9}, 0x6) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) r2 = dup(r0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000946000-0x2)=0x6, &(0x7f00006cd000)=0x2) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 131.327500] binder: 16117 RLIMIT_NICE not set [ 131.327875] device lo left promiscuous mode [ 131.330893] binder_alloc: 16026: binder_alloc_buf, no vma 2017/12/05 13:37:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000fef000)="4900002933605d0a378666f1333a8fa2b1e80f84c72db2205edf913f99b781482293b0f12516a9eb5102a254d2cb9c088ecd2a3b6e", 0x35) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f000014a000-0x4)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000512000)=@assoc_value={r2, 0x2}, 0x8) 2017/12/05 13:37:21 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) open$dir(&(0x7f00003df000)="2e2f66696c653000", 0xfffffffffffffffd, 0x35) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 131.330927] binder: 16091:16109 transaction failed 29189/-3, size 0-0 line 2870 [ 131.353342] binder: BINDER_SET_CONTEXT_MGR already set [ 131.353356] binder: 16124:16125 ioctl 40046207 0 returned -16 2017/12/05 13:37:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) pipe2(&(0x7f0000f72000)={0x0, 0x0}, 0x80800) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000654000)=0x0) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000424000-0x6)={0x0, 0x8000}, &(0x7f0000cab000)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={r2, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000b50000-0x8)=@assoc_value={r3, 0x5f}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000393000)={r3, 0x6}, 0x6) [ 131.353488] binder: 16124:16125 ERROR: BC_REGISTER_LOOPER called without request [ 131.353502] binder: 16125 RLIMIT_NICE not set [ 131.388120] binder_alloc: 16010: binder_alloc_buf, no vma [ 131.388147] binder: 16124:16139 transaction failed 29189/-3, size 0-0 line 2870 [ 131.394484] binder: BINDER_SET_CONTEXT_MGR already set [ 131.394494] binder: 16133:16138 ioctl 40046207 0 returned -16 2017/12/05 13:37:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:22 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) add_key(&(0x7f0000e58000-0x6)="757365720013", &(0x7f0000d0c000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000267000)="b0", 0x1, 0xffffffffffffffff) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 131.394608] binder: 16133:16138 ERROR: BC_REGISTER_LOOPER called without request [ 131.394621] binder: 16138 RLIMIT_NICE not set [ 131.420727] binder_alloc: 16026: binder_alloc_buf, no vma 2017/12/05 13:37:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x3ff, &(0x7f0000fef000)="4900002933605d0a378666f1333a8fa2b1e80f84c72db2205edf913f99b781482293b0f12516a9eb5102a254d2cb9c088ecd2a3b6e", 0x35) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) 2017/12/05 13:37:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000006f000-0x1c)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000037f000)={@common="6c6f0000000000000000000000000000", r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002eb000)={0xffffffffffffffff, &(0x7f000081b000)="2d", &(0x7f0000cc8000-0x1)="0b", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r2, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) [ 131.420758] binder: 16133:16150 transaction failed 29189/-3, size 0-0 line 2870 [ 131.426460] binder: 16133:16150 ioctl c0306201 2000dfd0 returned -14 [ 131.443711] binder_alloc: binder_alloc_mmap_handler: 16124 20000000-20002000 already mapped failed -16 [ 131.457332] binder: 16124:16151 ERROR: BC_REGISTER_LOOPER called without request [ 131.457344] binder: 16151 RLIMIT_NICE not set [ 131.458468] binder: BINDER_SET_CONTEXT_MGR already set [ 131.458480] binder: 16124:16139 ioctl 40046207 0 returned -16 [ 131.464054] binder: 16124:16160 got reply transaction with no transaction stack [ 131.464066] binder: 16124:16160 transaction failed 29201/-71, size 32-8 line 2670 [ 131.466202] binder: BINDER_SET_CONTEXT_MGR already set [ 131.466212] binder: 16133:16150 ioctl 40046207 0 returned -16 [ 131.466353] binder: 16133:16157 ERROR: BC_REGISTER_LOOPER called without request [ 131.466362] binder: 16157 RLIMIT_NICE not set [ 131.467632] binder_alloc: 16026: binder_alloc_buf, no vma [ 131.467665] binder: 16133:16150 transaction failed 29189/-3, size 0-0 line 2870 [ 131.540503] binder: BINDER_SET_CONTEXT_MGR already set [ 131.540515] binder: 16167:16169 ioctl 40046207 0 returned -16 [ 131.540700] binder: 16167:16169 ERROR: BC_REGISTER_LOOPER called without request [ 131.540712] binder: 16169 RLIMIT_NICE not set [ 131.543364] binder: BINDER_SET_CONTEXT_MGR already set [ 131.543373] binder: 16165:16171 ioctl 40046207 0 returned -16 [ 131.543500] binder: 16165:16171 ERROR: BC_REGISTER_LOOPER called without request [ 131.543509] binder: 16171 RLIMIT_NICE not set [ 131.573286] binder_alloc: 16026: binder_alloc_buf, no vma [ 131.573314] binder: 16165:16182 transaction failed 29189/-3, size 0-0 line 2870 [ 131.582233] binder: 16165:16182 ioctl c0306201 2000dfd0 returned -14 [ 131.585565] device lo entered promiscuous mode [ 131.595063] device lo left promiscuous mode [ 131.613970] binder: BINDER_SET_CONTEXT_MGR already set [ 131.613982] binder: 16165:16182 ioctl 40046207 0 returned -16 [ 131.614043] binder: 16165:16187 ERROR: BC_REGISTER_LOOPER called without request [ 131.614053] binder: 16187 RLIMIT_NICE not set [ 131.615261] binder_alloc: 16026: binder_alloc_buf, no vma [ 131.615285] binder: 16165:16182 transaction failed 29189/-3, size 0-0 line 2870 [ 131.651892] binder: BINDER_SET_CONTEXT_MGR already set [ 131.651902] binder: 16190:16194 ioctl 40046207 0 returned -16 [ 131.652006] binder: 16190:16194 ERROR: BC_REGISTER_LOOPER called without request [ 131.652073] binder: 16194 RLIMIT_NICE not set [ 131.660136] device lo entered promiscuous mode [ 131.660199] binder_alloc: binder_alloc_mmap_handler: 16167 20000000-20002000 already mapped failed -16 [ 131.665622] binder: BINDER_SET_CONTEXT_MGR already set [ 131.665634] binder: 16167:16181 ioctl 40046207 0 returned -16 [ 131.665678] binder: 16167:16195 ERROR: BC_REGISTER_LOOPER called without request [ 131.665688] binder: 16195 RLIMIT_NICE not set [ 131.673654] device lo left promiscuous mode [ 131.674045] binder_alloc: 16026: binder_alloc_buf, no vma [ 131.674070] binder: 16190:16200 transaction failed 29189/-3, size 0-0 line 2870 [ 131.707213] binder: 16190:16200 ioctl c0306201 2000dfd0 returned -14 [ 131.708765] binder: 16190:16200 ioctl c018620b 2000c000 returned -14 [ 131.748895] binder: BINDER_SET_CONTEXT_MGR already set [ 131.748905] binder: 16190:16200 ioctl 40046207 0 returned -16 [ 131.748941] binder: 16190:16208 ERROR: BC_REGISTER_LOOPER called without request [ 131.748951] binder: 16208 RLIMIT_NICE not set [ 131.750294] binder_alloc: 16026: binder_alloc_buf, no vma [ 131.750319] binder: 16190:16200 transaction failed 29189/-3, size 0-0 line 2870 [ 131.753972] binder: 16190:16200 ioctl c0306201 2000dfd0 returned -14 [ 131.754046] binder: 16190:16208 ioctl c018620b 2000c000 returned -14 [ 131.763169] device lo entered promiscuous mode [ 131.763330] device lo left promiscuous mode [ 131.816478] device lo entered promiscuous mode [ 131.820955] device lo left promiscuous mode [ 132.059243] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.059764] binder: unexpected work type, 4, not freed [ 132.059768] binder: undelivered TRANSACTION_COMPLETE [ 132.059780] binder: undelivered TRANSACTION_COMPLETE [ 132.059787] binder: undelivered transaction 381 [ 132.070548] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.070557] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.070637] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.070763] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.070832] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.070871] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.070885] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.070994] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.071061] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.071073] binder: release 16026:16035 transaction 387 out, still active [ 132.071078] binder: undelivered TRANSACTION_COMPLETE [ 132.071084] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.071109] binder: release 16026:16028 transaction 387 in, still active [ 132.071114] binder: send failed reply for transaction 387, target dead [ 132.075373] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/05 13:37:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)="2f6465762f73672300", 0xfffffffffffffc, 0x8000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x400000000df, 0x0, 0xfd, 0x0, 0x0, 0x1000000, 0x2, 0x0, 0xfe, 0xfffffffffffffff8, 0x100004, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x900, 0x40, 0xfffffffffffffb14, 0x638306309e9eb807, 0x0, 0x0, 0x4, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000e5e000)={0x0, 0xf000000000000000, 0x100}) r2 = gettid() syz_open_dev$sndseq(&(0x7f0000816000)="2f6465762f736e642f73657100", 0x0, 0x200) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x54a, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000b06000)={0x0, 0xffffffffffffffff}, &(0x7f0000b1c000-0x4)=0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdd, 0x0, 0xb275, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x20000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000bcb000-0x10)={0x4000, 0x3000, 0x0}) getpgrp(0x0) setpriority(0x0, r2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000fb7000-0x9)="2f6465762f6b766d00", 0x8, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000d94000)="2f6465762f6b766d00", 0x80000, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00004ae000-0x8)=@assoc_value={r3, 0x8864}, 0x8) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) lstat(&(0x7f0000917000)="2e2f66696c653000", &(0x7f0000628000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f00006b9000)={0x401, 0x4}) setgid(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000ae8000)={0x3, 0x3, 0x3000, 0x2000, &(0x7f00003a8000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000ac0000/0x18000)=nil, &(0x7f00005e3000)=[@textreal={0x8, &(0x7f00003e6000-0x45)="baf80c66b828c0a38d66efbafc0c66ed0fe74a000f2d9bc5fdbaf80c66b88445058e66efbafc0cb8bc21ef0f226667d3e266b9780800000f320f64f0660f3802f5ba4200ec", 0x45}], 0x1, 0x10, &(0x7f000066c000-0x10)=[@efer={0x2, 0x400}], 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x4) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000171000/0x18000)=nil, &(0x7f0000469000-0x18)=[@text16={0x10, &(0x7f000079f000)="0f21350f090f01330f00d1f2aff3e1360fa90f22110f20d86635200000000f22d80fc5dca0", 0x25}], 0x1, 0x0, &(0x7f0000274000)=[], 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00002af000/0x18000)=nil, &(0x7f0000af2000)=[@text32={0x20, &(0x7f000062e000-0x3b)="362e0f7f6937d95d000dc894d34e0f32440f20c02e660f38379776c4fcec440f22c03e0fc769920f3066b83d018ee066b81e010f00d8660f38103f", 0x3b}], 0x1, 0x0, &(0x7f0000406000-0x20)=[], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) alarm(0x3f82) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f000079c000)=0x0) flistxattr(r6, &(0x7f00006b4000-0xe2)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe2) 2017/12/05 13:37:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000fc8000)={0x2, 0x3, 0x8000}, 0x4) 2017/12/05 13:37:22 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f000029f000)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) 2017/12/05 13:37:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r2, &(0x7f00008d7000)="0e", 0x1, 0x20000000, &(0x7f0000b80000-0x1c)={0xa, 0x0, 0x3, @loopback={0x0, 0x1}, 0x100004}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0xfffffffffffffffd, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) [ 132.075382] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.075432] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.075442] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/05 13:37:22 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 132.228755] binder: 16219:16222 ERROR: BC_REGISTER_LOOPER called without request [ 132.236450] binder: 16222 RLIMIT_NICE not set 2017/12/05 13:37:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) 2017/12/05 13:37:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) bind$inet6(r1, &(0x7f0000b8f000)={0xa, 0x0, 0x7fff, @loopback={0x0, 0x1}, 0x0}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000943000)={0xff, 0x9}, 0x2) r2 = socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) recvmsg$netrom(r2, &(0x7f000092f000)={&(0x7f0000b0c000-0x10)=@ax25={0x3, {"30f41ec93a1890"}, 0x81}, 0x10, &(0x7f0000b28000)=[{&(0x7f00002cf000-0x1000)="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", 0x1000}, {&(0x7f00003c0000-0xdd)="6c2e429d854f6572b5034a0ecf7ece3db6ddc2f765f9eab16c04969ec13c30418fe46ffc6a2769bdc692d1e475053dfe97011afe36b4a0e1084f3cc7d7758a3a6147cfb10a1d843cdaff2c38b57cd80374aec1804023b5bcf9af3620e7ec4402978ecbbc06330473fc5b86404e238fa667412e609b5c383746ce4fe04544dc0385d8ae9e2a43beb758e18c692532f5f5d7b605a660a51c67242ed7331d8e1254b36054e1412dd6f87f4afc6f694f10528521d893e90b27a352c4df75d434cca51cf3c1a6bccb0e27a9189d5cf23ca6d32123d62026eeb20cbfee1cba7a", 0xdd}, {&(0x7f0000357000)="989d2d6ecdd877b32d325a2f704f787f791b9447a594b2bfec69276cd8b432b10780e271d537e1b2be0e8a8cd5b62a73e62aa245009a70f07440528a83e27dc92c8d9f249ff577fd68e5a994ddd81bf821dfcb8acd211584a5b68b4a3be838fdb6aa5c1a", 0x64}, {&(0x7f0000604000-0xff)="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", 0xff}, {&(0x7f00008ca000)="8102397e56bde87e310ef42ddf6968a12bbe019cf8495d8df9a2013c261a077e1bebe96c345824732b9fc4e4d5316ce8861bf0e60495690cfc7c7ee3b24e64426cf75d7d8d3fa72817de3dfbb12f03782655ca572d8892537d4b0f8c06a38d879a3c655e13973dc77ecbd8b311cde2c2e1f430f82a97418645a76fe490f6d1f3dbe154aed7a272ce739efa77", 0x8c}, {&(0x7f000055d000-0x28)="7751bd896ba3a62d8e1eea9e546b6240db7f19647efd56e21a1c9d8b386416d11da8374b04f8e32e", 0x28}], 0x6, &(0x7f0000459000)=[{0xd8, 0x0, 0x7f, "c6ce9e7901f9cc71068e2417259468909b760d01aeef9701f2323cdf66cba72640c8c07d8af749f2e97f0c8e5822c589ea9b6bc1a27d320a2b27e1873dc4df4cb2dfaeb03d88821cf02cf5ca31ef1c7ebab51f931412e9a4e1f8e3cd7d6de254c6a9fc844748788890d34d9c7194846d79b30a87e0a7fbbb70d2b67e91a132092dee369c4022a2b997c539ed60165dc9f7231824f573e8a1feb73626853ba3ebdda7fc800a0e860b16822c3eca2671c99015e40148a090079ca5c2d98e231cbfb1d048ca1b"}, {0x30, 0x6, 0x77c, "6950f94962209d75ddbcb6ff3ebbbe03762d27877b395b5e7b"}, {0x1010, 0x6, 0x9, "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"}, {0x98, 0x88, 0x87c, "6ab219b3d822df0b3ce4645a7d91c096f17f83ab1fe8b17e811e95b44d9a4a2d16d4eb2407108d0fcac00af51c2b080111deb7e58f0778c6229d7ad9b0902f954cc4314330037f2517fec97b71cb3edf69a058628027c129b5bd0610ccd489d2c1bca49ec1eab8dc0eff73ee216352dd13dfdbe0c9071a94ed0bf7c17ca3a4121da8d36019fd35"}], 0x11b0, 0x200400c0}, 0x20) close(r0) 2017/12/05 13:37:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 132.246196] binder: 16215:16226 ERROR: BC_REGISTER_LOOPER called without request [ 132.246208] binder: 16226 RLIMIT_NICE not set [ 132.266160] binder: 16219:16234 got reply transaction with bad transaction stack, transaction 408 has target 16219:0 2017/12/05 13:37:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004ea000-0x10)="2f6465762f73657175656e6365723200", 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000be6000-0x10)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000060a000-0x4)=0x200, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:22 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000020000)={r4, 0x0, 0x0}, &(0x7f0000a98000-0x4)=0xc) gettid() r5 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r5, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 132.266171] binder: 16219:16234 transaction failed 29201/-71, size 32-8 line 2685 [ 132.270426] binder: 16226 RLIMIT_NICE not set [ 132.270980] device lo entered promiscuous mode [ 132.271993] binder: 16226 RLIMIT_NICE not set [ 132.272072] binder: 16215:16226 got transaction with invalid data ptr [ 132.272097] binder: 16215:16226 transaction failed 29201/-14, size 32-8 line 2889 [ 132.272106] binder: send failed reply for transaction 410 to 16215:16238 [ 132.273010] binder: 16215:16226 ioctl c0306201 2000dfd0 returned -14 [ 132.273619] binder: 16215:16226 ioctl c018620b 2000c000 returned -14 [ 132.278337] device lo left promiscuous mode [ 132.297521] binder: undelivered TRANSACTION_ERROR: 29190 [ 132.297534] binder: undelivered TRANSACTION_COMPLETE [ 132.297541] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.308165] device lo entered promiscuous mode [ 132.308334] device lo left promiscuous mode 2017/12/05 13:37:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 132.315170] binder: 16219:16244 ERROR: BC_REGISTER_LOOPER called without request [ 132.315181] binder: 16244 RLIMIT_NICE not set [ 132.315184] binder: BINDER_SET_CONTEXT_MGR already set [ 132.315196] binder: 16219:16234 ioctl 40046207 0 returned -16 [ 132.316560] binder_alloc: 16219: binder_alloc_buf, no vma [ 132.316590] binder: 16219:16234 transaction failed 29189/-3, size 0-0 line 2870 [ 132.332181] binder: 16219:16244 got reply transaction with no transaction stack [ 132.332192] binder: 16219:16244 transaction failed 29201/-71, size 32-8 line 2670 [ 132.357774] binder: 16257:16259 ERROR: BC_REGISTER_LOOPER called without request [ 132.357787] binder: 16259 RLIMIT_NICE not set [ 132.391513] binder: 16259 RLIMIT_NICE not set [ 132.393117] binder: 16259 RLIMIT_NICE not set [ 132.393173] binder: 16257:16259 got transaction with invalid data ptr [ 132.393203] binder: 16257:16259 transaction failed 29201/-14, size 32-8 line 2889 [ 132.393214] binder: send failed reply for transaction 415 to 16257:16262 [ 132.394102] binder: 16257:16259 ioctl c0306201 2000dfd0 returned -14 [ 132.394287] binder: 16257:16259 ioctl c018620b 2000c000 returned -14 [ 132.399594] binder: undelivered TRANSACTION_ERROR: 29190 [ 132.399607] binder: undelivered TRANSACTION_COMPLETE [ 132.399614] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.412098] binder: 16257:16259 ERROR: BC_REGISTER_LOOPER called without request [ 132.412112] binder: 16259 RLIMIT_NICE not set [ 132.413624] binder: 16257:16262 unknown command 0 [ 132.413636] binder: 16257:16262 ioctl c0306201 20004000 returned -22 [ 132.415573] binder: 16257:16262 ioctl c0306201 2000dfd0 returned -14 [ 132.417071] binder: 16257:16259 ioctl c018620b 2000c000 returned -14 [ 132.424610] device lo entered promiscuous mode [ 132.431208] device lo left promiscuous mode [ 132.442081] binder: release 16257:16262 transaction 418 out, still active [ 132.442088] binder: undelivered TRANSACTION_COMPLETE [ 132.442111] binder: send failed reply for transaction 418, target dead [ 132.498876] device lo entered promiscuous mode [ 132.500926] device lo left promiscuous mode [ 132.520544] binder: 16274:16275 ERROR: BC_REGISTER_LOOPER called without request [ 132.520554] binder: 16275 RLIMIT_NICE not set [ 132.545026] binder: 16275 RLIMIT_NICE not set [ 132.546487] binder: 16275 RLIMIT_NICE not set [ 132.546534] binder: 16274:16275 got transaction with invalid data ptr [ 132.546560] binder: 16274:16275 transaction failed 29201/-14, size 32-8 line 2889 [ 132.546568] binder: send failed reply for transaction 420 to 16274:16276 [ 132.547452] binder: 16274:16275 ioctl c0306201 2000dfd0 returned -14 [ 132.547670] binder: 16274:16275 ioctl c018620b 2000c000 returned -14 [ 132.551740] binder: undelivered TRANSACTION_ERROR: 29190 [ 132.551751] binder: undelivered TRANSACTION_COMPLETE [ 132.551758] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.772484] binder: 16222 RLIMIT_NICE not set [ 132.777202] binder: release 16219:16222 transaction 408 in, still active [ 132.784082] binder: send failed reply for transaction 408 to 16219:16234 [ 132.790971] binder: undelivered TRANSACTION_COMPLETE [ 132.796081] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.801532] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/05 13:37:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f000020a000-0x6)={r3, 0x10003}, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r4, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) 2017/12/05 13:37:23 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000542000-0x8)={r3, 0x5}, &(0x7f00005fd000)=0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r4 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r4, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000f81000-0x108)={0x1, {{0xa, 0x1, 0x7fffffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5f00}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x76c, @loopback={0x0, 0x1}, 0x7f6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000457000+0xd4)=0x0) getpgid(r2) 2017/12/05 13:37:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000761000)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000414000)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00004f2000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000b3b000-0xf)="2f6465762f73657175656e63657200", 0x240000, 0x0) r4 = openat(r3, &(0x7f000032d000-0x8)="2e2f66696c653000", 0x50000, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) semctl$GETPID(0x0, 0x5, 0xb, &(0x7f0000190000-0x40)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000bdb000/0x4000)=nil, 0x4000, 0x2, 0x40010, r4, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r2, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 132.807066] binder: undelivered TRANSACTION_ERROR: 29189 [ 132.812516] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.849390] binder: 16281:16284 ERROR: BC_REGISTER_LOOPER called without request 2017/12/05 13:37:23 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00007c8000-0xb8)={0x0, 0x23f, 0xa4, 0x8, 0x20, 0x200, 0x9, 0x40, {0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ff, 0x3, 0x5b71, 0x100000001, 0x4}}, &(0x7f00005fe000)=0xb8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r3 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r3, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 132.853005] binder: 16279:16289 ERROR: BC_REGISTER_LOOPER called without request [ 132.853034] binder: 16289 RLIMIT_NICE not set [ 132.854521] nla_parse: 18 callbacks suppressed [ 132.854528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 132.877643] binder: 16289 RLIMIT_NICE not set [ 132.879136] binder: 16289 RLIMIT_NICE not set [ 132.879389] binder: 16279:16289 ioctl c0306201 2000dfd0 returned -14 [ 132.885208] binder: undelivered TRANSACTION_COMPLETE [ 132.885223] binder: undelivered TRANSACTION_COMPLETE 2017/12/05 13:37:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000dc8000)={0x0, @in6={{0xa, 0x1, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4}, &(0x7f0000050000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={r1, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) 2017/12/05 13:37:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000597000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x20}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00001b7000)={{0xa, 0x2, 0x3, @loopback={0x0, 0x1}, 0x6}, {0xa, 0x1, 0x7fffffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xb6e}, 0x5, [0x100000000, 0x0, 0x5, 0x513232f4, 0x2, 0xffffffffffffffff, 0x9, 0x7]}, 0x5c) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 132.885230] binder: undelivered transaction 425 [ 132.889734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 132.891676] binder: 16279:16289 ERROR: BC_REGISTER_LOOPER called without request [ 132.891686] binder: 16289 RLIMIT_NICE not set [ 132.893337] binder: 16279:16297 unknown command 0 [ 132.893345] binder: 16279:16297 ioctl c0306201 20004000 returned -22 [ 132.894552] binder: 16279:16297 ioctl c0306201 2000dfd0 returned -14 [ 132.911949] binder: release 16279:16297 transaction 429 out, still active 2017/12/05 13:37:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00004f4000-0xa0)={0x0, @in6={{0xa, 0x3, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xffffffff8353f0f6, 0xcdd, 0x360d, 0x9}, &(0x7f000004f000-0x4)=0xa0) r3 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r3, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) [ 132.911971] binder: send failed reply for transaction 429, target dead [ 132.946716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 132.954420] binder: 16301:16303 ERROR: BC_REGISTER_LOOPER called without request [ 132.954430] binder: 16303 RLIMIT_NICE not set [ 132.973410] binder: 16288:16293 ERROR: BC_REGISTER_LOOPER called without request [ 132.973423] binder: 16293 RLIMIT_NICE not set [ 132.985786] binder: 16303 RLIMIT_NICE not set [ 132.987507] binder: 16303 RLIMIT_NICE not set 2017/12/05 13:37:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000e92000)=0x31, 0x4) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:23 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x80000) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r2 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r2, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 132.987723] binder: 16301:16303 ioctl c0306201 2000dfd0 returned -14 [ 132.994406] binder: undelivered TRANSACTION_COMPLETE [ 132.994421] binder: undelivered TRANSACTION_COMPLETE [ 132.994428] binder: undelivered transaction 433 [ 133.027443] binder: 16284 RLIMIT_NICE not set [ 133.027795] binder: 16301:16303 ERROR: BC_REGISTER_LOOPER called without request [ 133.027803] binder: 16303 RLIMIT_NICE not set [ 133.029916] binder: 16301:16316 unknown command 0 [ 133.029926] binder: 16301:16316 ioctl c0306201 20004000 returned -22 [ 133.030859] binder: 16293 RLIMIT_NICE not set 2017/12/05 13:37:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) 2017/12/05 13:37:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x5, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f000065b000)={0x10001, 0x1, 0x4, 0x5, 0xee}, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f00002d3000-0x3c)=[{{&(0x7f0000e50000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f000048d000-0x20)=[{&(0x7f0000d8a000-0x22)="00000000000000000000000000000000000000000000000000000000000000000000", 0x22}, {&(0x7f000002f000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8d}], 0x2, &(0x7f0000b2b000-0x5e)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5e, 0x38}, 0x7}], 0x1, 0x2000, &(0x7f0000232000)={0x77359400, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r1, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000a5c000-0x14)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f00009ce000-0x4)=0x14) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000d7c000)=0x0, &(0x7f0000b59000-0x4)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000a49000-0xa0)={r2, @in6={{0xa, 0x0, 0x1ff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x81}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x1e0, 0x2, 0x40, 0x62}, 0xa0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0xfffffffffffefffd}, 0x8) sendto$inet6(r1, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000709000-0x4)=0x7, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r3, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) [ 133.031183] binder: 16301:16316 ioctl c0306201 2000dfd0 returned -14 [ 133.045921] binder: 16293 RLIMIT_NICE not set [ 133.065769] binder: 16281:16311 ioctl c018620b 2000c000 returned -14 [ 133.066051] binder: unexpected work type, 4, not freed 2017/12/05 13:37:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) [ 133.066056] binder: undelivered TRANSACTION_COMPLETE [ 133.066071] binder: undelivered TRANSACTION_COMPLETE [ 133.066079] binder: undelivered transaction 440 [ 133.067176] binder: 16281:16321 ioctl c0306201 2000dfd0 returned -14 [ 133.069508] binder: 16288:16293 ERROR: BC_REGISTER_LOOPER called without request [ 133.069523] binder: 16293 RLIMIT_NICE not set [ 133.069930] binder: release 16301:16316 transaction 437 out, still active [ 133.069952] binder: send failed reply for transaction 437, target dead [ 133.074543] binder: 16281:16318 got reply transaction with no transaction stack [ 133.074553] binder: 16281:16318 transaction failed 29201/-71, size 32-8 line 2670 [ 133.089189] device lo entered promiscuous mode [ 133.089593] device lo left promiscuous mode [ 133.091565] binder: 16293 RLIMIT_NICE not set [ 133.093706] binder: 16288:16319 got reply transaction with bad transaction stack, transaction 445 has target 16288:16293 [ 133.093716] binder: 16288:16319 transaction failed 29201/-71, size 32-8 line 2685 [ 133.097609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 133.104841] binder: release 16288:16319 transaction 445 out, still active [ 133.104848] binder: undelivered TRANSACTION_COMPLETE [ 133.104856] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.104956] binder: release 16288:16293 transaction 445 in, still active [ 133.104962] binder: send failed reply for transaction 445, target dead [ 133.139738] binder: 16338:16342 ERROR: BC_REGISTER_LOOPER called without request [ 133.139756] binder: 16342 RLIMIT_NICE not set [ 133.155150] binder: 16336:16347 ERROR: BC_REGISTER_LOOPER called without request [ 133.155159] binder: 16347 RLIMIT_NICE not set [ 133.155205] device lo entered promiscuous mode [ 133.162345] device lo left promiscuous mode [ 133.186309] binder: 16347 RLIMIT_NICE not set [ 133.186418] binder: 16342 RLIMIT_NICE not set [ 133.187796] binder: 16347 RLIMIT_NICE not set [ 133.188192] binder: 16336:16347 ioctl c0306201 2000dfd0 returned -14 [ 133.195722] binder: undelivered TRANSACTION_COMPLETE [ 133.195737] binder: undelivered TRANSACTION_COMPLETE [ 133.195745] binder: undelivered transaction 451 [ 133.196569] binder: 16342 RLIMIT_NICE not set [ 133.201279] binder: 16336:16347 ERROR: BC_REGISTER_LOOPER called without request [ 133.201290] binder: 16347 RLIMIT_NICE not set [ 133.203880] binder: 16336:16354 unknown command 0 [ 133.203896] binder: 16336:16354 ioctl c0306201 20004000 returned -22 [ 133.205153] binder: 16336:16354 ioctl c0306201 2000dfd0 returned -14 [ 133.207145] binder: unexpected work type, 4, not freed [ 133.207151] binder: undelivered TRANSACTION_COMPLETE [ 133.207164] binder: undelivered TRANSACTION_COMPLETE [ 133.207171] binder: undelivered transaction 454 [ 133.224981] binder: release 16336:16354 transaction 458 out, still active [ 133.225041] binder: send failed reply for transaction 458, target dead [ 133.227656] binder: 16338:16342 ERROR: BC_REGISTER_LOOPER called without request [ 133.227667] binder: 16342 RLIMIT_NICE not set [ 133.231435] binder: 16338:16342 got reply transaction with no transaction stack [ 133.231444] binder: 16338:16342 transaction failed 29201/-71, size 32-8 line 2670 [ 133.251192] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.251224] binder: release 16338:16351 transaction 460 out, still active [ 133.251229] binder: undelivered TRANSACTION_COMPLETE [ 133.251262] binder: send failed reply for transaction 460, target dead [ 133.505500] binder: 16284 RLIMIT_NICE not set 2017/12/05 13:37:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000597000-0x1c)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x20}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00001b7000)={{0xa, 0x2, 0x3, @loopback={0x0, 0x1}, 0x6}, {0xa, 0x1, 0x7fffffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xb6e}, 0x5, [0x100000000, 0x0, 0x5, 0x513232f4, 0x2, 0xffffffffffffffff, 0x9, 0x7]}, 0x5c) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) r2 = openat(0xffffffffffffffff, &(0x7f0000a6f000)="2e2f66696c653000", 0x20000, 0x100) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000eff000)="") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000926000)="", &(0x7f000043c000-0x4)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000793000-0x4)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00007b5000-0x4)=r4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000e24000)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) 2017/12/05 13:37:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000c45000)={0x0, 0x6f, "1fefdbbf3f0fc644732226dcc7e75dc6f21ceb33a16e6837d2b3f916fe6317edd7af680f90a03998a5726dd7980e438c4f80571eae2e553c7dc6c5ab310cfb76075290c35ef6595d73ef6e6ee155167149efd09ae427391dca0426627b7036cb2081a8da70ba6deb58eaebd29ab40e"}, &(0x7f00008f4000)=0x77) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={r1, 0xfffffffffffffffc, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000faf000)=0x20000000000003f7, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r2, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 133.510132] binder: release 16281:16284 transaction 439 in, still active [ 133.517039] binder: send failed reply for transaction 439 to 16281:16311 [ 133.523935] binder: undelivered TRANSACTION_COMPLETE 2017/12/05 13:37:23 executing program 1: gettid() mmap(&(0x7f0000000000/0x5a0000)=nil, 0x5a0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000005000-0x58)={0x26, "736b636970686572000000000000", 0x0, 0x0, "6c72772874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) mmap(&(0x7f00005a0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00005a1000)={0x26, "736b636970686572000000000000", 0x0, 0x20f, "6c72772d73657270656e742d73736532000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) mmap(&(0x7f00005a1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000424000)="d3ab2719000000c75fba000000d3000bfef9f3d2a405f00000fffffffffffe000212070097c11e2f57440002ffa86eb9", 0x30) mmap(&(0x7f00005a1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x12, 0x80001, 0x4) connect$llc(r2, &(0x7f00005a2000)={0x1a, 0x23, 0xd346, 0x2, 0x8001, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) mmap(&(0x7f00005a3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$alg(r1, &(0x7f00005a1000)={0x0, 0x0, &(0x7f000019d000)=[], 0x0, &(0x7f00005a2000-0x18)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x5bff694ae9e2596a}, 0xc0) mmap(&(0x7f00005a6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a9000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f00004f7000-0xe0)=[{0x0, 0x0, &(0x7f0000454000)=[{&(0x7f0000167000)="2d7ff36121629161b337d55877ce114e16423a88efa23f92d81684cc7ee9d0fa94ea445f9fc7808b30c0c0ab5a19ffc47a81f093763ad79e545631d7011649230ef2ec00860a48d7e5fd7ae4cee034c5bf02ede0e5b477b847b5acc01fa6f77d8397e029f17c14ed78c54bbbc7d0bfb1b732fd60ae9e0459d5f45fd434a20430fd5b9cfb8fc2d4c34ad65774da19e6afff1a04bc42b165965477de49d635eedbb37c467a1396bda7d9a7e6fdbd22a3063b6f135024e62c4a2d5ba0670df4e846209df48094c259c5839dc5db74e3df90a755b9ee89e903508aa6c71542", 0xdd}, {&(0x7f00005a6000)="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", 0x1000}, {&(0x7f00005ac000-0x7e)="782b6ec29e67fd8dbb7188050f55d82860317cb23f5d4a38075db9880945c3431a6b72b2692ab2b6bdafee838c0e758b0504aef17ba458962109b9efbce577a7feb955e79bae081141545f1d48adfe470a2d6512379e151d49e1bfa86a08c5451721cfb00fd615a859c20180b21ec9f20b7638366964adda72601917fca2", 0x7e}, {&(0x7f000032f000-0x37)="0f106af7ebec559ffe543f74799f91bb5ae5e88c4f46c8af9f0c2a04de50a4bff249cbf16f994183cf1efd898f55c678f57e77368c468c", 0x37}], 0x4, &(0x7f0000510000-0xe0)=[@iv={0xb0, 0x117, 0x2, 0x96, "1d95bb327a659a136379efef6098733197a10ce69990578d5bed8559e3aac69ed7c8ee9c039ba8a7cacd989bbbe5e1ef4073bc3248afd0584fd693e2108010b95412ebdb9a6a03ff27e9eea45c256f5621bac58ba694fc040a976d7bf3134768b6075fe6eaa9512da8c2eb43a3f52d639504849d1969248a95c600b7e7aa7c082e567b5a79f737ebb3c760d69cf1047221beff0fc69e"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x0}], 0xe0, 0x890}, {0x0, 0x0, &(0x7f00005a8000-0x90)=[{&(0x7f00001ba000)="1c3ac4bf4d2be1fbdec8698f46cd819c5f4ab6ba3fc553db18fa671230cc0b9f6d2362af5e6bad6dfccdeaddac02dc8b8c4853432cb347618997e315bd3e5cffdbe3b587c8816227c721edd7748187d79e80bfeb92630983654848ffb2f226d550e28a398c5860f1e0d6379d209e4470c17b8f3ea3b5b8fc39005a9009ca593862f289ce9774c74716c95d2c8c1eccf70bb03b033b5a976da4179faf468e830bd38fb89821209208e35575b5fdcdd8c64a52b14ada5bb1eae82a4bbc19b67e9b7a327b0f722b7dbcd41c55f8b2cc0c9bd9448c6b23", 0xd5}, {&(0x7f0000372000-0x50)="a534d155775bb7974c22d18f44b2bf96c878de4ec85fc71188bb8ccb37264f82521cb742a89157350b4e348f985532ad947c7f3dd2a188856976760adbd07f6ad7de1a4cd12f8edaef0f5160cf0ccad4", 0x50}, {&(0x7f00003d3000)="8608d16bc0a0bf0d8b447ae825b730429ec4e76861769c0609f39fa95ad45f2cafebbacb2f214419ef7a3fb6c97ff8bf0e08e46cc604c3229b620d0845ea01364048cd778e2c56b5315550d62edcf829584ecad5065355c4263edeab35c9bda304", 0x61}, {&(0x7f00001f2000)="43e5449f58b2f304144a6e413c8190cefafa167af4f79bf1fe19", 0x1a}, {&(0x7f00005a7000)="86baa66c5c4565159541095eeb5f97e46ab2", 0x12}, {&(0x7f0000493000-0x1000)="a49fc37d1c73432117120ed42486a1b5f1b397adfcdc4d00beb4d3598540a2e38744526630afca8227bc3b9344daa8856cd503be1f8181d7146220c83c31e6f0cd0fcb8911475e94f139dde0c5fdf498d71f756b35378c0a078fdf2f6565466b8ec5c5c9da5de45549884898bac09235b67caa33f8824407e1315ee9330acfd45b5f395d26efa2c06ea3fc1f4155c22ec30f8aaa7c6673aa07f7101c22e2580a86834b1c570ac4c2243219dfdb1c02743ed450896f5aa3f82ce23c9a52821b32fdd90b688572ac91f7884eb4de5b09539ce991c89987b9db29a473420b063177cc347adcb2cb2d2dcfe4995160435f7aa7e9c1c74ffcb3a2d74273779b7da3fa660359060285ed29024d9c66ec3fa066ba6ff9fce00ffc12b98cd955eaeee3ce41107f8eb9ac18503c194c40fd9ddf522a16c85e39bf6762a3474f44769a505d823aaeca087233ccb170140bb0677ca20a848e660443c36e071db69ab4e253ec4ba42b114579c3f82e90bcd0fcb60a7a3ce43c208171a90627d9cdfb5751890b1304440afa0a0bff94ad698539b55dec8b9d08cab45bfbf0f5fe3c5251eeea3eae01e12c3202d0ea2012d2e09b8cb93725d3557aaa32f9d313840225aab0fce22e6c5ab110772c0eb9cca2492597fd0457b4094d07495914f26d2554bed1fbb2ae7049bd788541840a4be88c318646e8414b2c39eabaaf9af3d3a8bcedc25067bf91ebf70798ca2b31049929a9f0cd7a2942fc835f5050c33056a3618d2a1e4b9b832d9d0134711e22d4d0bf998a4696c14624cafdfbe99ae10a1347577892d6ed1c14e287a20a52752a02f6b0d3dfb573187bb829f3d1cbb11c22535187172141ce01abd94765db8115f1db21569845a0e35227ed927a81ad01e942109f9992bf8f4a6dd04bf4d1c3636c12d500d7f6e117c2638c7ce11f62b475a6b61fa62bfb5627191213f0ed2ad3de02504687c25d236d1763bf0cd77900413846e1f848fdea9c2fd88e87435c5c1dbce63ce6b35ed89f5234547f0d4018b6d553f56b58639111303da90ac8b8ef8c66aa8000bfc2391bc524ec2f487c1b670a6f8a90cd6c8c688343af7dd3cd0cb283d8f0378e3b101b5a52ab90f60d6d9eebacc422ca5334aa81f60be2474c7f0a81bd967eba352d4cc624bb109bc29616dbc5cb0113ca3c23d7952b28b87f7b5c748ab6f239c0afe364df3b45e295e9a29d7353cd46b9cc1f7d3d161dd4194d830f93f1edd2903bcbe1bad55a1e685b6adcc90525da551f720bd406e3b79bf942e7e0f0f2c4a887ed832d38ad981912a7e3ac255d5a308fe2cad6bf49938f76c0260d33c1b0af8abd2b5dd682f80ae16d93e4a332d2668934b29127b83b6836d13eee515c342c3a0a1da18195af1d2a57750e6f48fab7a3e39a5c3f5413baa99def8ab1e1f7f66c5cc68c389a00c6f441dd5495beafc0a4654dc7f4d6505a4efc039728c2b6a0c10612b53d839158cf325d34d5d265fb95c22bd27eb94ac3afb6c483a9c87a7e5d82b2cb5020d4b471d3c853b8492c2b7eebc54b66401ae6ab2248620cb4425ef6760d9244c61c8b27374936db1db2caaca7ebfca96676e72e124b8d40cdf688b5507ece8dda4e2abcae1039b23d8955bed8cc162bf47df2381a0466109be7217ae96f07bea0c4c1af41995f72c7dfe0bd6a7526388a23c31b0857b68cdbd072ab470bbda78afaafb2ca11ad2554037eb1359673c2b1030dfcbc8eea7ce8d2b6b8b022440ca9653c5179e1dd88e31bc476a8db68955359128a3c2d75e565291179076f163e5fb6c83050540f31dcdd4e1d856fd97c25c5d3a5f79123dc571cd22ebcc90dd4cb50519c8743e58f70c0a03cf0dfa13d81e0ee768c19991a88313e9be7f680518bfa6279840ab9ef022c0c908ebf5bd618d9c440d77e4854770c6547430fb17bafbc364db592d2f2d921cfc779babc0f1893293eaa103a6e6a58c3e607f9968d9f74e3851abe10b00b212b3337468ab0d426cd343d6ba7b76d72b7a284fd8726c6b7130914e0d06823652344517f9b30761f401e23cb4f52ab878fc42149b06b1b200c65b97baa83d2949d92288522da7ca34733c15d039bf8e53f4992ef6ccde11a5f78d886930f563ef228c4852828c3445f7f3859d2cf4d8ca3b2fad513162e6c6bb96de952d33f95b9f444dd2e5fd1ef2d88565e87d1e18b670c49e3455b7430a64039db3556aebea507e04df0c50f338722db759441c49dfaab59926137ed9f0a45ec9b88e21440d521354436d46546a300690fbb9ae6f99968561af8f6d6dfce051e2c13070338b1cb950b0388cc0a0a33514dba95a879e2d6d92ff740a171635c9bdfe60dd465ee8512d97750d762249a4a9d67d92b8a7fade50296aa858997a1fd9124f1e499f0a267d064c741ac62365276ed85aa825b9a52e3c3614c024677685aa66d05763436af1df217e2024e1eb147bc787a5b4aee11f712fc28a75ff643fb1040254da31816a81b614bd4527a7d3f962ef777b8dc98cb43c9ec85f3a01998cb99af2d490d27210d9e39f187741123752da4b24001ff0285b85a81a1f7990384dcd5603c9da3bca6f75f822d62cf23581d29657756292559992a4c850104b8fe785c8814a386c228b490ff2947736280ed0c26badc914b83958b2d77f4547840977835171fd830961ebbaa85c59642086b24d5666d94a2dfcfd91da7927636dd2b5549b6d3b57b6d79208fe7f07535f96f3e1200d67c922b034a39dca9a5038c6a06371a0d6d41d9af8449ca6f1f46e59cfd4ae034b2184b138377fa18c82469c6a67a49d5540ff3dcf57641f188a2c810c5c85c3b2f46aa928bc58868ddc1f7c799a58e81349ba8e722f6dc9d62ebb37db3dcef28169dcee1185fde675b4da7ba941bbc0a5b33fbbae82ca3166b69ea77213ef26a57d88c29be455740f0bba748c24244698621dc015ca2b563559c9f7cc214aacf8d0f8a8711bffa05e86233af5c1b8d3bdb524d1cdd8accbe5ad6884b04ff3a0e7899d85620fcb99631c535c083c51afeb9bfab5585b8b5cd52dc492223e04160021d8c0b4e61eabfa1cb98b729c9dd47bb8568ef03603f82080a78a1c850f4106516b25a182ad5d48bfd180eaf1334351bb267904aee3a45b9619e73639fa071276538af8f524fe89c334de8d5af15753fb6a1171d8eaa4b6683ba1240895023054c4f954d58d2ddd06eaf9c76b34e6f14a69682f5b060d206459a235118527384cb462d70ba97d92e86dc9716a47f56f87a65108e7b9530dd48d3523cf0b50eed1f9448bc2fa40c7012d6f0ed5574a18849ef6e2b0c640887ad3321a30c305561991d05a8bb98f95e65ddc4c9662dc178a871d55c643977457f912b2714f825071f1b3aa1d02ae556267037794e0d623086371248a870cabaa6f3da73c3c619003e7805d726b04ed1d6b91f83607de41ca915ec8d7cc4b9e3f9e9c21ca020076d141e933b8962443a0682d42adcf37bd28dca425a427248360ceb243469f0c5819e48f2bdc1e28ebefaf816a97abe78a1be83f3591517e62aa59e71be3b1caa181f857a35c420208243af0f5bf65c059e73c56f2435494812caddeeaf778aca0140a9e1bcd15905d693afa05a6c26bfb55d7bca773b29b61f1322dae2f7d8316f448de98788945e55470f79cc86c5091de1fb89bffe202caf39239cb84a90a4e832dc7b34b37541c97f74cdc6318d65f1098040fc8458fae411e390a0b98e435e478a89343acb94c5ec392646e31f535803d9046745e7964e419d91766bb8643abdaff6589fe8618662efb51cb82d4c3bdd40d4a78c8905eb70527c342e2f0af4a63027ab8882ad1c16a945deaadcfc59ba31fc1d0847bc1bc25287d465eb6c14abe4eb3e13d9a30e6ccc6ee94e68a9842cf4cdab728f356b081c1cf6ebdbc1962dcad25544d4b8b1c35cc83b9b83d730800e89db7546292bfae578605007c21c50cdde9afa09d4462ad98d02e3ada57d68d0f4d0f617126674061240fbdd4d25ed0c0b1cc623c5ea6dfbf789f86d18e7105cab7832d4fae10f594f021ca9cb556c7649e291dbf19b5ed69a5007b9a54a7eb5d12b95867c8664a2c6e619a511313737f1fa935e8680c1a9fa35201087bdc4571905ca6aa9dc983f7616fbf20d72ed4c95330b5158a924318be6eb0d40ae2a2cdb02bca7700fb98492c14c0e8ee558e3e8904085e86ac8351ce261efa7b3657c8d8be400c72dae42d05ad6cfe41b75f4d3cd47ed9ee38bfacbd5e2c81bf24cbe2c93afde934a01463f32b06869e8fd32cbf45bc1600b2527a07c74d0f76aac19574e1afeb7b29b8579695ba2f0ec4e134a133db9812faecf105453cbd950e69328200d433fe0314f0df7f2a82e43c65b8eb5b385d50c5f8bb08dff747e0ba9e1662033ad4d6b89deb933a6a385386d8b91709953563e911fb5465f22473e1bdc9b7f2bdaeebb784d8511dad2bbe5f46071a2849a5c0f3505fd320cd95b6eac01ae2c24497d9aa39b8cf10e5180cb4baddea29928bff0eb120bfcdc0410ee6e770b9353380192ccc0ead5778ff5738aa5608f78fe71f083874bc44fb2ff976699df6de93b6afa4d59d5d671a44eee3eefb0c75779c5b366d588b47a2928e8f47a5b18b5de3cdf801c71378e4602d8a14216cb7c1164f639b663f75ffda34728d2da587e60add15ea15bceac7fc49e9bd3c4e0d0c71bce5be163234557fcab1d4b30535afad4448135a47540bfe08534d2d13cf9b151acada0395c5f9c2d5b3794060144e8f0dd297b829b68c00aacd57b36abf4ec5e11c7511a54b67ed30647f76607b6c27e5123097f064d213e980cf976958900201994054f68be7f4f24b6e83167ba9701d0164845f8105afe487bb81e7550e934ea959a25845e27399027f6261176940acf4a3b1428a5a7597c65b8599d6f45d35f686710f28f1cda74285bd0f615f485d6934a6e646961e337ce589372cb70bc2ba4478ff6e6f862124557f57a3200565ef3ddeb83a6879c153489ad676a0d8760110c035d44cff52d057d45d373ed201e7acc77af05ede3fc2a11621bdd67cb76067a83bdbd53322a1a285fa9e098f5ca102c3c39f32a72729ff0187840f9dd603f4d0b863d5cb22d436165811a8dfb52f2ecd2e9c5c9842b8e038861c3a5f41605caf8f66b602bb7c52dca51a9ab9efa9641ba76f7a76a2219920aa4c138f12c20335ed3d12772252b341983d8c9e05168a2fc4211edc2167f449ee4ec8fa4605cc6d6446c8e66a729e2d852229e55bdc94fcecb27e45fa61bb967bf64cdd29beeff82734bede67558003785775d014baded78ebc44a02ced49afe55907103bbdb907d7a3ec4d090387d85b7bc490a5fc630399d4766c4aec024f98ea3f2f14270fed9c888b6750b8d401d019f6b9f5421fce17aec39437fd2650cbed2e5dda4a5c690c76205854a950a7f4c56486119d0dc50f4620c42711acbf0b723a64c5c9f98e0b6631c1267ecfb09cd567cd85e7cb0849acd403554705a2de2927e83350855e432e66810adfd685b07c1707652b76098a4752fffc68a8a0e9b19c57afadbf96500cdf352886d4ae5649e967c7362c4a99e92b2ada7f8fd7013342a758df1a1ff5cde3f48faaa8545e3cddd6dcedcde613e05773a3b23608dcc3e81af1c0ee3a48549faeaa69d82c01e81e31ef5a46e06d0958a85f26ecf96c08597769651fd56376a136fb8b70601b9ed9242190321898dd53d0d4b4857f3d5a1f033a0faebb498c481f7eba4e6357022adc13b7d84277f6fe233dac3e7dd8d4772cb07bb32ee7197", 0x1000}, {&(0x7f0000353000)="21b257bb70ee132afa28453c54a2297d4bbc127305605fd237edc41f87c80f4622b779043f398b1c873d003246f09a6274dbdeddea6a800ec869c26d3ad1b62ea1cfb29cfe028005ea20ca653abf6083396e8de67dcc3b1e56f8a85a", 0x5c}, {&(0x7f000004f000-0xef)="330e8f8a261833582b4065f27886c2255e7cf6bcc06e4be7fb45e0f1085d7e8aa0307c677ac48bc425636ad7fd33e70888c1f37298d5d4cc9f312e0069edb13778dd7c455ec9599b2cb41c0338a8268156730f3f290341d8f808afb12688526e8966e9df384e3f67252d29eefd56eaee4891f29ee0d966f61b3be4372d20a91673f6adfdefc9b7db7c242713a50ca69a3df449b03b00f8726c56578cdbfa6c55eb48be79f5341db2bc9a958206daf9ec93b61297016b8e69bff8d575d128e03994c77139369afc1a9eb172dfacc29dea15a8bb753e1253a43eb30bbf860e9b02e07b32ffe74cfbfa02ac4240a0dd74", 0xef}, {&(0x7f00005a8000-0x1000)="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", 0x1000}], 0x9, &(0x7f000018b000-0x138)=[@assoc={0x18, 0x117, 0x4, 0xbc01}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xf0, 0x117, 0x2, 0xd6, "49e871d75029c1bf9053569c483d93924f27cfb3271c3284ff6918a961e3730899a1163106282776924ba525324e585b401ee0c6d64be25eb86069370a0ef0e5f20698a609765b430254224c31ad8b8d929d728a4c681b0062b9d8d95789d5a768cad7665b8f9134c9ec6f351af56ab6047e6c1b6f30b50d4426f90f2b7a234eb3ec8cb0343bb4713be0aec188cf8d24350f7018093ea6856051c9f39f64f790f08452f57c2c99d45756cf6d53dcccb4f26bc8e12e10658024a5553f5d6702cc242d422c50db628763544673573d52a9faf4dfbcaf4b"}, @op={0x18, 0x117, 0x3, 0x0}], 0x138, 0x0}, {0x0, 0x0, &(0x7f00005a9000-0x40)=[{&(0x7f00005a9000-0xf7)="2d0976bd58646b58a3ff5fc863fa3640b93f6f01657adf18b68c132c751fcc79f17ed8533c8f178959265f2b6b9174f7f96f6cb5bc2f68b195c1f8f83babe560b604d9bcca9f5b4c3d5bdbf3cd5ace3c1935d4b9c9b90d5391f1a60aee3d082f5148a259d1faf4a8603e29e75cf72b82bfb185949782ae75baebd0e9f6cda07b118064dc3f701b5a710ed38b516b356c74ef3ab523e7c9f088988797ec23be3f0a25113acdb30c84e5f1401da368ed27d3a142df53739f97fe17811c5316fb45c914e07ee097b268d1ccacbf44929c7fa4b1182246fc96565f504c59f86ecf3af5cc18fdd39b5262ea92e8709536ac085c7671d9f5b69d", 0xf7}, {&(0x7f000011b000-0xf2)="db5f83061cdf62bc3a7b874b4e2837ae70c2a488503bcd8fa3dab1ce0c41a1d70f46fd6e441b78a5080685534994bec0445b91e9e70d0263d5bc9eb49f97bc0f44b50283e718dacd3da1c33bd61677cef9e713bac4d323a093308894a80d3f7623746cf6311a036032e95c173405872a882f8018ded29cde284beec9ac0d3b0031456803d3e9724524ebd84bbdf87e63381e9d53a32db3e8dca989c4bc5581dc25f38167739d17b1476e8dee22d6f1e2d80a04851555086ff32d1c448ef4e2260faa0194314afd85e2a895ecc8aba30faef08985923230e0e0996f8bc05ba254280e6902db34434dec336ccb7054bb035d77", 0xf2}, {&(0x7f0000199000-0x26)="42f995618d64b6372381c35d3d972ae315d5655f8d8629e527ebcf9b0f5a85e71c8c447aeab2", 0x26}, {&(0x7f0000504000)="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", 0x1000}], 0x4, &(0x7f0000542000)=[@iv={0x78, 0x117, 0x2, 0x5f, "878c5dceb5e208386fe511a79a01b3e52d7a327cca1774e98a2fa273e5b6f38433108678abb909ba5d1fbb835318bbee1f1f26974b8341b78af603f1b003a925e886db6592edcbcce349065db4df7e2158038c91143990f2580c5d8608c013"}, @iv={0x80, 0x117, 0x2, 0x68, "a36f2b7b58db4be3b2c08a9f779ba9f72781d9e1c446de04d920f4a7920c16eec6b1ce118cee9b12bb916e1577c6bb535d87f5cea5964876c89e0731dedf2616109444634c1731435867fc5e8d4d1dad8cfb0f246da1350f4db62055696c1c96ffd4d02f224fbebe"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xb8, 0x117, 0x2, 0xa2, "62aa7febdc2df8d8fd296883fb8db51ceeeb32e494f9802474068129fb914b177302633cdb161f831eabc683073ba3d8e333ecb2d46a56ccd91941deda88d5d407d1ba457eb8b4dcd061fd4c6ffcef29ff44e61eb1f4b890819db085806f4dad3d11800f68b312e718bc11b7c5cb3f051c766ebd5279232707ae75d8fff5f749a966c72cb4ba7dbf8a4c84fa06fd94dc89f34cbfa3ffc6e677d7995a54899a7f691d"}], 0x1f8, 0x1000000000004044}, {0x0, 0x0, &(0x7f00003bc000)=[{&(0x7f000059a000)="5c091434866264aefc4ca372e110d55e226ac6ef963dd010091f2d7dcaa8932af976839d3bab67e38f9949f1119f7563b3a25c23d63b271e958d088182485a037d1c56dd15ce50513a29134efd91504d68206fd40b0addc7665629d614331a8efb74ba57c1bf88a0a25b", 0x6a}, {&(0x7f00002a8000-0x64)="b928ae7a07eb4ae22d0f1535c009051c06a2e64710008bbf5ef0ae769f4613b271026adaaca572a4e80963635c79e37bc60ff9e78223d356059af56dbf43a5bffe8d432b2518300bc52b7b27747e3f28f7d953c93d975df5c26bbc79b6ba5600e1a3e7c5", 0x64}], 0x2, &(0x7f00005aa000-0x1068)=[@iv={0x1018, 0x117, 0x2, 0x1000, "60a3d707c47f00796fe16c9d0d016a163c3d023059dfe377170408afd5a24e44abddf73d855b9eb8eed92bb85e67b57616996287b8a426d4019fc7c40c56632d7fdfd43890ca6a946386c7936beb75505f5700f54cf5ba8f583ff90a2f51babdacf1aca7507e94a42ac09aa235b8a8b3a83f5885c8e7dabc915fd289b2949f4efba51d856c5540e78d29fc0747f814d6f343f867df7daf72d06e4722cb2a6d363020eead68705d0c3e97bf50c00872988099c1986339384576bf71d325062be1ba9772adeeb6b680ff0bc62b398332067ad75739274a934008211c2ae3cbed47a109c82faa931041b0f7a4290bf4e4631339fc0d1aedda89e82cf3f6f9d83e46b3cf9685effdf2a5aa92b75a01f70551d2dd6eee7bae09301be2c7239091357a9db5e9bb3a143c02339a57216ac4c16d6b43287a7f3ce694bbe08a2f62834f3b517c2b5053858770da5f54a7422daf67b911f40ec9832376f2ea8e87a66a810f935743eab2d1a57586b347f0e2693d06dd1c5d1f6c91734a3b8159c7bf7a0d401d05486cba4e4a3f6a8dac75fb94a574ac1e10e474039311f79649298412a1a800ecba7c041a28175560089014dcc9e39ae4c24ad03eab852ad324c8d14351cc9cfeb6177578088896b0e8842123987b2e22b7e281f9c194476662ef014db64c95754b1191e80a1ce0ab7cf227b55c5101c9b8423795def26ebf0cd9e915fa0069b61f431e1b799ae7d9da6a9540ecf0b8b5397031956f968db4f51bb77bda8018e2d655719f816036b6d834e2d437f5782af914e0534447c85f167f96e903e9654596f1b81699db57279c03e51cd9501df464f0d3121e738d33ad667f19cd100b9118b98dc9fc92585f879c891181be4d95889cc99548bd798e621c9231aee9e3d45ae27b0a4a62246739b82f75f023da808c0010e0234cde3251b8cc5fc224548157a1aedf97f798bf2ab514f96200ff01e20772bfaa81574f6a38e1cf9a76d5478c13c965e3d645c4755a8179f6f90bf4837eff503499e868399b19c07193214ba82438c2e04ebe446daae81624a9908ddd2b8f415ada8b27ce481d95ec8c72ef7621b294a21c892e10cde15cae7a9a2a4e837d5660f05a59acff70c121a6872b622727e8156fa253df2f9ee9825557701bfd9f05df8a8252e0bbffd01cd8fe415aa4a8f194f53f6c8822737a4c16236152b1df92a082074a1e96dc23638d20b37954eec5b8c806458eaf5d856ba0ed7980946797fa17751f82182dbe8b1e743651c3b006987c58d1b0cde0539e192c0b4fd91f619e0543ae969b3c7eb1419f05d1df869851fdab32d994e67cc67c35488f2024d1558ae12747d11f9609f55843eb94d9183430349e3f4da21fd577933266f8a43db01f579f8c35d48eba13ff53613dcd4a8f9f2794de3530be341eb231301d27cbd4d8e5076ef2bc89bf24954b0ae246b758b03a93b8e225e7798771343a47605e1accf0aef7e11032284a795042c4fc85def6a043ddce23093d4fc93f0de420e87c5dd50443e07c543617caa382ade5a921c036ff4508715b221da2b683913a86e403b54c4572376e7bb6cd43a570cc592d885be2b4b3d7c8131c425924abe95e5c457cfc60452a38068383c3cef234e8f830cd4d5465ec65b304496d4b3216f54e60db6f5046b6e33d045ec2fd07f0b83df52de0b17cb815cfce3604f6a4f2a40bdf31599959adb38cd20d4d011dea2064aee969c3d0e2a154578be1e0b52a21d5aebf97bad17e5008b84ced15e103ee9fd4869158bbaac4b195938b54711ef0976ed1794caa94f2e288a009d2dffcbfc36c970fbc82eb1e8abf2677527da1f139afffa5cb9ab2bf5d4ecefd4704ac433460916508785b062c333ffccf4214311fc65edadef68e959d5e9b716345a701373aa243ae2cf7a0fec6a5a7cf11ee4084ace70447629d5ee8940d19d73626dca26e32c51927cee5e815e01cc622c72c4987e107e22575f86f9a47a5814b94ffcdfe995b2bfe2fad8e5df39fc06ef714737a83ae095335083db245a311f324abea8dcc6391c4c003fa6065b174dd9a903a44404b768e9f1ba3ef81b058e56aaa6c1224c009f7de1954794b8ee268b4e438d9ce6c81f18f6ebfc88edda490bcc29e2e806f649a251d6a34c49cc63443a1f4e2821d2d943a5b06519a656bda0a6fee43a1ab0d32265b6e17d13029f6b15249a594dfe0dc19f514e202120c2b95d6226d4d3ff26db98737f08135f5ec415c628bff1d9bdd06161a2b87a03a9d8da4d0475b3d100eb4c3b34f90cc8e8a117bda1c4210356bb6b6c59411b08a15c946f1bf40a0e76c4917e55ac94860379440a8921c29a72a59f630626623e0c2a8a523eacbbfd5052eb24838da558aa133105da303dd3ca75365c45801764ca61819d4a979c8b67baf5726e068c9354b7908aea0da12d5c9323bb9c7a40a224137c8199627f4ff4d57b338e549a55c4243c6f0e90e8405332fe49cd73c1a801651ac15062622d16d5643720836d910ba860a22799dd0b61b7d6221c8f7c2a3b6ed809721c23499e5aa0a2a3c5591095d7f164f209c3a04bbe6b22d7c64d24d13161500330e58b0c27d6d4ca0c3e2c7364d6b84e104071171bec24083dd9617f8dbe131e91d57d946a1b8abaeb7dc12598e2413a2c0a7e7a500964c545862ab8a4ad4e8712bfe93218a4075eb0b642d2b0602f6f1640c3a992ca765b457104c0d7bc9a039f825a10331862a6f5f3666f5f4c76c82c5a9b5649acb11e4aa3d9a31a36b4b00e6b2093448512c6a00d0873ae79cc6bcaec12b54d998ec33fa40ff5b271c76e065f339a4af1b519ae36a2de96e8050fb9e091a7446c74e7f8bcaf0f04110c48a45398235e1bd429076fd88782ac42799b43076067694f6b7ac48cc34657198efdc2f95771e77c3867a6ca03e4728c5d76c39c339014dfaabecad767308ec2873e0a531e2d43b2c790a473b01f74eefcf9f8f4a40303d36da7d687384f8eb99045169a2368e28f70520a4cb5a9acfc4b3064aeb13a2a809461322b71cc97d67b44dceda0e006fae1d8481595cdc937a7d510cdbac169e2378fd1890c201296f4430577af4216398e7ea4dfd8e69dd54a0579402a7194cb1b21099d3f39ac40ec7bfd5b86a284e1aa1b038c8acad7d878d101b1dbfea0ee53e1a8ae65081d85c065c952e746bbff2b57b5a78939cd0af93090c1e939adf7db7bec32dd58f916a1bba740f48278e0028d4156c24009fb3c86781e1d69aa6164306c3a4a091fe6ea1616aab265e9c755f81e193463c14117202b2f8c8b3d83f67919cadd70661beeccc6b871aec3933435149f0b93af8d536f7e6d961c7711268938b5d8cae0d5416f170fda083a3466db48d23f98f1b6437d507842099aff1efc7c45bb9db32f187e89f2f961dcce45fd81d803633189d04ef528ac1c12eeb13f0d1946f71ddc788d501cf591a633ee75ac54edd2e860a744c41c938b762e7767e0146d8709ac672f830daa45fc5fa688e22f26117ad67cf6fa77ab90075a273045bc3128195efb38ca33da70060faf1a348b6ed5277c9c112972f5a1cd1744ac6c867f45c3d09a8b8ab105019c54fdced24b9229dfb132fc46fd8aa143972aa666f47108f4c9f997a71b52a28c71017148efd8b3d57bb1c638cbf85be4acf6f9f803dbb63b3f477663b56a8e3047222d2be851c57575c5cf6e6e0cde13ab9be0e413931caff821a707a1bba1f090289661c038751d6a6094668777335795bf2b580c1896b280a41666b7fa3985d366b5b6702a2e1a00a5dc0abd831e31777d10d4e9188235b8b7eaa21355efceda7f65a2bd38cbe61ac66181f410096503ebc4fcd4a47c9c78b5bddee785760ae67071a495ce0a7344ecdbce4437d4c690b0e8b463fbcdf7f62b59d4ab57b28ae9227f45db79fa6fb1240bf6750544623d8f80a330bb816c2bbf9198c8b51bdb4b85e97c357d1d1b1dd603cba52299cca775f76c11753e6acc3d3057dda01f92fda22e22e1cf48d16d9b0b59831a0390e052ba2fbde7e64995e17b291012a45b1ff4bca1814d98b1246fe8485cef18761bc31e6009414adc17216d0062f085ce1638ed47b663ad17dc7ea9c5150b661364d084d0bbc9586bf780873f18ed510aad8dcd349c7fe9d7c9a0cf45f33327bd7c5c707093e0903a08dd6c948c6c56b165bc91afd08cb81f89282658482fcd00f563b81b7b8829913779ed715c0c5a3dcbdf24a72c7d9622eff6163620e1107529e2ecb7502371399bb376dec7a604930c9e32b0b7c72d47c845208270c77a913c283f888cc297c6d83e8428ec06ab7850a33be5911393e2137073be2c542b3a42a3660dd9bc76c9824d590175eb2ee9733068169232f014e7b337a8036da769ba2de7ea5419d8a7cca6654f34031003300a97458e931f62d5b70aee1eb1efcb9fbc613310c711695bbfea994d5e8b7d63eaa55a0223110c1f13786a9b04341ce8bc9fe1c8bf5867117425c517b797e714d62964a96faec41dbdb9533774d20df19785c11042ab192f301484b071737eef998868d2595605ffc84bdaa15a70024d5690b542fd2ca041302fd803fa205d299bd57843f0959401cbd064e89f53ffece72730cfb32016d6f66cce205a66f3dbdf996ce18e4d81df67ce3451e5d78c102d732bd94a0ce5ffb2e733d86086451091cafcc158b8a29d49b08838e57baf6415a0008a0da01ca7d15f6b33926f11bab4480bcbe43fbbb66e0bad494aa1cfaa5be4cc12502af6404197e30fb5e8909c3963b3645e7999dbd89cda4478655d92c0adc7f10fff4b22774fd3a33a8d2b41892896b03de23f4f6f7b9fcbd71b32f36b46c6df309ddd495f7b460aaa9731bf16ef71a10180c6021cddb8df2b487849def5d75c9fb944b598e6c975dbcfe202be39170ea903df7917786173d8f78f31fe0981ba2d357d376cd8aecb2718863b2aae4718e015092eeaf534e37a0d853dbe6c8141ac5c9d14890af9424999f18daa2bb3a0a99af9c7a64c60015807e3405c503d5d71b8465f4c0c4a90b8974d38a1dd43a88159861e260b3f5395718ba8c8bd3674fae9f01c7abb1c849323378e98ccdc8e10308002be07704c540788f4a76ba83f4d1dcb7f3d3cc3435dddbe5ded1cac933f97f33b60c408aa7a5724c8cbc1f085fc2551c85ff188e0eff0c600cea63edb84f202cb96356c37ce74cfceb78702432707747ca870f17aeac09e636b71e8f9df55859080f77ea3b214515fa701439b89b95d7c675c01bbff2e8872d114846a6c029efbc087057b55975fae63f159de10126f8f63a0c5cfff466b69e7580bb4cb395490afc773b30f340142cb1c66f67157268d54a01cfc7b51225b571315e0e0706a5acdec326e24579b99137b3c065bb2ba39dc2afce174c6f77cc8c52296b387b80eab16bda500bae493d9571040d5319ac63dfe1f2983f29b177e4101271a8efbbbfcdfa3abd883002ea5c98c8fbe3707867f8c37cab347d3589e044d267ccefd334d619ea92ad9eddbc108e5e6902597a622949c7930bf67c683b883494eaeb29b88d83a7e6c8f54ebb0df304c8b91a9d41af178fe96e02f8416c352e682e2bdd27845ba3c2cba7aea5837943924c595c72873f7249c52a08ac36a6592051385260941908a215cc1491099159469b725163b942a3ff870e8e8d6faa197c05f51cf0af37caceb2249c6b0ae274c42a872a41bf5c22e5a30f328224cbd78874759335b0d8f3844e39af1512e7fa5aa3526033187521e2e165a49c22a89e50a2b3bc1b24d9ec5d8f3f8f5865"}, @assoc={0x18, 0x117, 0x4, 0x3f}, @assoc={0x18, 0x117, 0x4, 0xff}, @iv={0x20, 0x117, 0x2, 0x6, "ff055ee5085c"}], 0x1068, 0x45}], 0x4, 0x4000810) r3 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000204000-0x4)=0x0, 0x800) mmap(&(0x7f00005a3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005ac000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000549000)={0x0, 0x2c, &(0x7f00005ad000-0x2c)=[@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0xaf, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffff}]}, &(0x7f00005a3000)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00005a3000)={0x80000000, 0x209, 0x2, 0x8, r4}, 0x10) r5 = accept(r2, &(0x7f0000136000)=@un=@abs={0x0, 0x0, 0x0}, &(0x7f00005a2000)=0x8) mmap(&(0x7f00005a2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005a6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00005a7000-0x4)=0x0, &(0x7f00003cd000-0x4)=0x4) mmap(&(0x7f00005a4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00005a4000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00005a5000-0x4)=0xe8) mmap(&(0x7f00005a4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00005a4000)={@empty=0x0, @multicast1=0xe0000001, r6}, 0xc) recvmsg(r1, &(0x7f0000596000)={&(0x7f000006f000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x60, &(0x7f000059f000)=[{&(0x7f000059d000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf8}, {&(0x7f00005a0000-0x8d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8d}, {&(0x7f0000185000)="0000000000000000000000000000000000000000000000000000000000000000000000", 0x23}], 0x3, &(0x7f00003f7000-0xbd)="", 0x0, 0x0}, 0x0) 2017/12/05 13:37:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) 2017/12/05 13:37:23 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in={0x2, 0x1, @rand_addr=0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 133.545915] binder: 16361:16366 ERROR: BC_REGISTER_LOOPER called without request [ 133.545931] binder: 16361:16366 ioctl c0306201 20008fd0 returned -14 [ 133.547130] binder: 16361:16366 ioctl c0306201 20004000 returned -14 2017/12/05 13:37:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:23 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) socket$inet6(0xa, 0x2000000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r2, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 133.549005] binder: 16369:16372 ERROR: BC_REGISTER_LOOPER called without request [ 133.549059] binder: 16372 RLIMIT_NICE not set 2017/12/05 13:37:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000245000-0xb)="2f6465762f6877726e6700", 0x80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000aa2000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000001, 0x6, 0x0, 0xfffffffffffffffd, 0x10004, 0xf000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000706000-0x2)="0000", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000f9a000-0x8)="2e2f66696c653000", 0x4) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000fa2000-0x28)={&(0x7f0000efb000/0x3000)=nil, 0x4df, 0x0, 0x30, &(0x7f00004bf000/0x4000)=nil, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00008aa000)={0x0, @in6={{0xa, 0x1, 0x80, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x52}, &(0x7f0000005000-0x4)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f000027e000-0x8c)={r1, @in6={{0xa, 0x3, 0x8, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5ae}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) [ 133.556136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 133.572553] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/05 13:37:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x7ff, 0x5, 0xb2, 0x5000000000000000}, 0x14) 2017/12/05 13:37:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x346154a8, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 133.572565] binder: 16361:16377 ioctl 40046207 0 returned -16 [ 133.573839] binder: 16361:16366 ERROR: BC_REGISTER_LOOPER called without request [ 133.573859] binder: 16361:16366 ioctl c0306201 20008fd0 returned -14 [ 133.573931] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.573957] binder: 16361:16377 transaction failed 29189/-3, size 0-0 line 2870 [ 133.574199] binder: 16372 RLIMIT_NICE not set [ 133.585265] binder: 16361:16366 ioctl c0306201 20004000 returned -14 [ 133.585417] binder: 16372 RLIMIT_NICE not set 2017/12/05 13:37:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x5, 0xb2, 0x5000000000000000}, 0x14) 2017/12/05 13:37:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000bd4000-0x28)={@generic="105b935883cde5f834da0d4925332826", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00002f1000-0xe8)={{{@in=@multicast1=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000eac000-0x4)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@generic="47c25674623d1354db63f89f65a4e630", r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000cbf000)={0x0, 0x0, 0x30, 0x76, 0xffffffffffffffc0}, &(0x7f0000db9000-0x4)=0x18) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000aaa000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000374000)=0xb) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000f49000-0x8)={r4, 0x20}, &(0x7f0000690000)=0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r2, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000003d000)={@generic="8c7d42bc0de8dc5775fdd434c233bf61", @ifru_flags=0x800}) r2 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r2, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 133.585751] binder: 16369:16372 ioctl c0306201 2000dfd0 returned -14 [ 133.593680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 133.609404] device lo entered promiscuous mode [ 133.610877] binder: BINDER_SET_CONTEXT_MGR already set [ 133.610887] binder: 16369:16383 ioctl 40046207 0 returned -16 [ 133.612156] binder: 16369:16372 ERROR: BC_REGISTER_LOOPER called without request [ 133.612166] binder: 16372 RLIMIT_NICE not set [ 133.612250] binder_alloc: 16369: binder_alloc_buf, no vma 2017/12/05 13:37:24 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) [ 133.612274] binder: 16369:16383 transaction failed 29189/-3, size 0-0 line 2870 [ 133.614335] device lo left promiscuous mode [ 133.622385] binder: 16369:16383 ioctl c0306201 2000dfd0 returned -14 2017/12/05 13:37:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0xb2, 0x5000000000000000}, 0x14) 2017/12/05 13:37:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:24 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:24 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000546000)="2e2f66696c653000", 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000f6a000)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00005f4000)="2f6465762f76637300", 0x80000, 0x0) r3 = epoll_create(0x1) r4 = fcntl$dupfd(r2, 0x0, r3) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f000008e000)={0x0, 0x0}) r5 = add_key$user(&(0x7f00005ae000-0x5)="7573657200", &(0x7f000020c000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000964000-0xab)="497be23f2f40f6e323d331ea1c9c2d76a3bb98d5d38b202ec990074416a91672bb2d29b77f0e0b7d26169b7bb11e899f9f476b9b29768c0cb559ee8114c1ec4e840df90e7151a15f3723dd6f09b326371e98b4ffe842b87c64a890d6c12c4b7c3d5fce9fc1ad447f70668d03fcedd869f97a0a06364e67486fd29a206785ab29990c70b6d12f97175bc39e6711a45bf9c2a06465cca8fe523f59235643fdc6724efe9d3189643376d145ac", 0xab, 0xfffffffffffffff8) keyctl$get_security(0x11, r5, &(0x7f0000ebb000+0x35e)="000000000000000000", 0x9) readv(r2, &(0x7f0000d21000-0x10)=[{&(0x7f0000a49000-0x1)="00", 0x1}], 0x1) fstat(r2, &(0x7f00002b3000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x200000010000200) r6 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000541000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001000-0x38)={&(0x7f0000239000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000008000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x200, 0x1, 0x1, [r6]}], 0x1, 0x0}, 0x0) recvmsg(r8, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000)=[], 0x0, &(0x7f000000c000)="", 0xfc13, 0x0}, 0x0) connect$netlink(r4, &(0x7f00007bc000)={0x10, 0x0, 0x1000, 0x3}, 0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000bc9000)=0x0) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f00005e7000-0x56)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000139000)=0x56) pselect6(0x40, &(0x7f0000cc9000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000cc9000-0x40)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000de000-0x40)={0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00008e6000-0x10)={0x0, 0x989680}, &(0x7f0000205000-0x10)={&(0x7f0000cc9000-0x8)={0x0}, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f000066d000+0xc29)={&(0x7f00004b8000-0x10)=[0x0, 0x0, 0x0, 0x0], 0x4}) [ 133.643830] binder: BINDER_SET_CONTEXT_MGR already set [ 133.643841] binder: 16393:16399 ioctl 40046207 0 returned -16 [ 133.643974] binder: 16393:16399 ERROR: BC_REGISTER_LOOPER called without request 2017/12/05 13:37:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000b83000)="2f6465762f6877726e6700", 0x4000, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00001f4000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000f80000)=0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$inet6(0xa, 0x3, 0x613, &(0x7f000039e000)={0x0, 0x0}) 2017/12/05 13:37:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000}, 0x14) 2017/12/05 13:37:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00009fb000)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r1, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 133.643992] binder: 16393:16399 ioctl c0306201 20008fd0 returned -14 [ 133.644129] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.644153] binder: 16393:16399 transaction failed 29189/-3, size 0-0 line 2870 [ 133.644599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 133.650062] device lo entered promiscuous mode 2017/12/05 13:37:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x7, 0xfff, &(0x7f0000599000)="01000000f603580000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f00002e9000)="16", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r2 = getpid() lstat(&(0x7f00001b7000-0x8)="2e2f66696c653000", &(0x7f0000fa1000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000092e000-0xc)={r2, r3, r4}, 0xc) r5 = socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f000002a000)=0x0) close(r0) 2017/12/05 13:37:24 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:24 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r1, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r1, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) 2017/12/05 13:37:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:24 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) [ 133.650177] device lo left promiscuous mode [ 133.659970] binder: 16393:16404 ERROR: BC_REGISTER_LOOPER called without request [ 133.659987] binder: 16393:16404 ioctl c0306201 20008fd0 returned -14 [ 133.660121] binder: BINDER_SET_CONTEXT_MGR already set [ 133.660129] binder: 16393:16399 ioctl 40046207 0 returned -16 [ 133.661720] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.661744] binder: 16393:16399 transaction failed 29189/-3, size 0-0 line 2870 [ 133.664575] binder: 16393:16404 ioctl c0306201 20004000 returned -14 [ 133.666432] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/05 13:37:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) r2 = syz_open_dev$mice(&(0x7f0000932000)="2f6465762f696e7075742f6d69636500", 0x0, 0x8000) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000775000)={0x0, 0x0, &(0x7f000055e000/0x4000)=nil}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) epoll_create(0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c36000)="2f6465762f6877726e6700", 0x8400, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) 2017/12/05 13:37:24 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:24 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r1, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 133.666440] binder: 16402:16409 ioctl 40046207 0 returned -16 [ 133.666544] binder: 16402:16409 ERROR: BC_REGISTER_LOOPER called without request [ 133.666553] binder: 16409 RLIMIT_NICE not set [ 133.694422] binder_alloc: 16369: binder_alloc_buf, no vma [ 133.694451] binder: 16402:16418 transaction failed 29189/-3, size 0-0 line 2870 [ 133.700986] binder: 16402:16418 ioctl c0306201 2000dfd0 returned -14 2017/12/05 13:37:24 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = syz_open_dev$sg(&(0x7f00000c8000-0x9)="2f6465762f73672300", 0x1, 0x10000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 133.702411] binder: BINDER_SET_CONTEXT_MGR already set [ 133.702421] binder: 16417:16420 ioctl 40046207 0 returned -16 [ 133.702848] binder: 16417:16420 ERROR: BC_REGISTER_LOOPER called without request [ 133.702865] binder: 16417:16420 ioctl c0306201 20008fd0 returned -14 [ 133.703005] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.703074] binder: 16417:16420 transaction failed 29189/-3, size 0-0 line 2870 [ 133.738368] binder: BINDER_SET_CONTEXT_MGR already set [ 133.738380] binder: 16417:16420 ioctl 40046207 0 returned -16 [ 133.739582] binder: 16417:16428 ERROR: BC_REGISTER_LOOPER called without request [ 133.739609] binder: 16417:16428 ioctl c0306201 20008fd0 returned -14 [ 133.740857] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.740882] binder: 16417:16420 transaction failed 29189/-3, size 0-0 line 2870 [ 133.744230] binder: 16417:16428 ioctl c0306201 20004000 returned -14 [ 133.744292] binder: BINDER_SET_CONTEXT_MGR already set [ 133.744300] binder: 16402:16431 ioctl 40046207 0 returned -16 [ 133.745649] binder: 16402:16418 ERROR: BC_REGISTER_LOOPER called without request [ 133.745658] binder: 16418 RLIMIT_NICE not set [ 133.745827] binder_alloc: 16369: binder_alloc_buf, no vma [ 133.745851] binder: 16402:16431 transaction failed 29189/-3, size 0-0 line 2870 [ 133.752644] binder: 16402:16431 ioctl c0306201 2000dfd0 returned -14 [ 133.788239] binder: BINDER_SET_CONTEXT_MGR already set [ 133.788249] binder: 16438:16440 ioctl 40046207 0 returned -16 [ 133.788466] binder: 16438:16440 ERROR: BC_REGISTER_LOOPER called without request [ 133.788476] binder: 16440 RLIMIT_NICE not set [ 133.793683] device lo entered promiscuous mode [ 133.795256] device lo left promiscuous mode [ 133.807156] binder: BINDER_SET_CONTEXT_MGR already set [ 133.807165] binder: 16445:16448 ioctl 40046207 0 returned -16 [ 133.807290] binder: 16445:16448 ioctl c0306201 20008fd0 returned -14 [ 133.826443] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.826469] binder: 16438:16451 transaction failed 29189/-3, size 0-0 line 2870 [ 133.827405] device lo entered promiscuous mode [ 133.827525] device lo left promiscuous mode [ 133.847415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 133.874862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 133.902189] binder: BINDER_SET_CONTEXT_MGR already set [ 133.902199] binder: 16445:16457 ioctl 40046207 0 returned -16 [ 133.903654] binder: 16445:16455 ioctl c0306201 20008fd0 returned -14 [ 133.904648] binder: BINDER_SET_CONTEXT_MGR already set [ 133.904656] binder: 16438:16451 ioctl 40046207 0 returned -16 [ 133.906738] binder: 16438:16458 ERROR: BC_REGISTER_LOOPER called without request [ 133.906748] binder: 16458 RLIMIT_NICE not set [ 133.907958] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.907980] binder: 16438:16451 transaction failed 29189/-3, size 0-0 line 2870 [ 133.910149] binder: 16438:16458 got reply transaction with no transaction stack [ 133.910159] binder: 16438:16458 transaction failed 29201/-71, size 32-8 line 2670 [ 133.937004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 133.938373] binder: 16464:16469 ERROR: BC_REGISTER_LOOPER called without request [ 133.938392] binder: 16464:16469 ioctl c0306201 20008fd0 returned -14 [ 133.940108] binder: 16464:16469 ioctl c0306201 20004000 returned -14 [ 133.952354] binder: BINDER_SET_CONTEXT_MGR already set [ 133.952363] binder: 16472:16474 ioctl 40046207 0 returned -16 [ 133.952453] binder: 16472:16474 ERROR: BC_REGISTER_LOOPER called without request [ 133.952463] binder: 16474 RLIMIT_NICE not set [ 133.980382] binder: 16464:16480 ERROR: BC_REGISTER_LOOPER called without request [ 133.980404] binder: 16464:16480 ioctl c0306201 20008fd0 returned -14 [ 133.980772] binder: BINDER_SET_CONTEXT_MGR already set [ 133.980884] binder: 16464:16469 ioctl 40046207 0 returned -16 [ 133.981663] binder_alloc: 16464: binder_alloc_buf, no vma [ 133.981689] binder: 16464:16469 transaction failed 29189/-3, size 0-0 line 2870 [ 133.983641] binder: 16464:16480 ioctl c0306201 20004000 returned -14 [ 133.992663] binder_alloc: 16361: binder_alloc_buf, no vma [ 133.992698] binder: 16472:16485 transaction failed 29189/-3, size 0-0 line 2870 [ 134.001921] binder: BINDER_SET_CONTEXT_MGR already set [ 134.001930] binder: 16484:16487 ioctl 40046207 0 returned -16 [ 134.002097] binder: 16484:16487 ERROR: BC_REGISTER_LOOPER called without request [ 134.002108] binder: 16487 RLIMIT_NICE not set [ 134.035618] binder_alloc: 16369: binder_alloc_buf, no vma [ 134.035647] binder: 16484:16499 transaction failed 29189/-3, size 0-0 line 2870 [ 134.055128] binder: 16484:16499 ioctl c0306201 2000dfd0 returned -14 [ 134.058421] binder: BINDER_SET_CONTEXT_MGR already set [ 134.058430] binder: 16472:16485 ioctl 40046207 0 returned -16 [ 134.058623] binder: 16472:16498 ERROR: BC_REGISTER_LOOPER called without request [ 134.058634] binder: 16498 RLIMIT_NICE not set [ 134.060007] binder_alloc: 16361: binder_alloc_buf, no vma [ 134.060056] binder: 16472:16485 transaction failed 29189/-3, size 0-0 line 2870 [ 134.065800] binder: 16472:16498 got reply transaction with no transaction stack [ 134.065829] binder: 16472:16498 transaction failed 29201/-71, size 32-8 line 2670 [ 134.087095] binder: BINDER_SET_CONTEXT_MGR already set [ 134.087106] binder: 16484:16509 ioctl 40046207 0 returned -16 [ 134.088291] binder: 16484:16499 ERROR: BC_REGISTER_LOOPER called without request [ 134.088300] binder: 16499 RLIMIT_NICE not set [ 134.088366] binder_alloc: 16369: binder_alloc_buf, no vma [ 134.088389] binder: 16484:16509 transaction failed 29189/-3, size 0-0 line 2870 [ 134.090850] binder: 16484:16509 ioctl c0306201 2000dfd0 returned -14 [ 134.124869] device lo entered promiscuous mode [ 134.126594] device lo left promiscuous mode [ 134.138783] binder: BINDER_SET_CONTEXT_MGR already set [ 134.138792] binder: 16517:16518 ioctl 40046207 0 returned -16 [ 134.138878] binder: 16517:16518 ERROR: BC_REGISTER_LOOPER called without request [ 134.138887] binder: 16518 RLIMIT_NICE not set [ 134.141849] binder: BINDER_SET_CONTEXT_MGR already set [ 134.141860] binder: 16521:16523 ioctl 40046207 0 returned -16 [ 134.141954] binder: 16521:16523 ERROR: BC_REGISTER_LOOPER called without request [ 134.141964] binder: 16523 RLIMIT_NICE not set [ 134.155655] device lo entered promiscuous mode [ 134.169143] device lo left promiscuous mode [ 134.171319] binder_alloc: 16361: binder_alloc_buf, no vma [ 134.171347] binder: 16517:16533 transaction failed 29189/-3, size 0-0 line 2870 [ 134.171481] binder_alloc: 16369: binder_alloc_buf, no vma [ 134.171502] binder: 16521:16535 transaction failed 29189/-3, size 0-0 line 2870 [ 134.244317] device lo entered promiscuous mode [ 134.249459] device lo left promiscuous mode [ 134.249849] binder: BINDER_SET_CONTEXT_MGR already set [ 134.249859] binder: 16521:16546 ioctl 40046207 0 returned -16 [ 134.251973] binder: BINDER_SET_CONTEXT_MGR already set [ 134.251983] binder: 16517:16533 ioctl 40046207 0 returned -16 [ 134.252200] binder: 16517:16548 ERROR: BC_REGISTER_LOOPER called without request [ 134.252210] binder: 16548 RLIMIT_NICE not set [ 134.253436] binder_alloc: 16361: binder_alloc_buf, no vma [ 134.253461] binder: 16517:16533 transaction failed 29189/-3, size 0-0 line 2870 [ 134.255653] binder: 16517:16548 got reply transaction with no transaction stack [ 134.255661] binder: 16517:16548 transaction failed 29201/-71, size 32-8 line 2670 [ 134.256331] binder: 16521:16535 ERROR: BC_REGISTER_LOOPER called without request [ 134.256346] binder: 16535 RLIMIT_NICE not set [ 134.256439] binder_alloc: 16369: binder_alloc_buf, no vma [ 134.256463] binder: 16521:16546 transaction failed 29189/-3, size 0-0 line 2870 [ 134.284144] device lo entered promiscuous mode [ 134.315087] device lo left promiscuous mode [ 134.981862] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.981873] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.987372] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.987538] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.987619] binder: release 16464:16469 transaction 481 out, still active [ 134.987623] binder: undelivered TRANSACTION_COMPLETE [ 134.987640] binder: send failed reply for transaction 481, target dead [ 134.992830] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.992941] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.993125] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.993188] binder: undelivered TRANSACTION_COMPLETE [ 134.993199] binder: undelivered TRANSACTION_COMPLETE [ 134.993206] binder: undelivered transaction 467 [ 134.993308] binder: release 16361:16366 transaction 463 out, still active [ 134.993313] binder: undelivered TRANSACTION_COMPLETE [ 134.993332] binder: send failed reply for transaction 463, target dead [ 134.995332] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.995342] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.995378] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/05 13:37:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001ce000)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f00006aa000-0x1)="", 0x0, 0x4, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x7fff}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000a7b000-0xc)={@local={0x0, 0x0, 0x0, 0x0}, @empty=0x0, 0x0}, &(0x7f0000af0000-0x4)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000df0000)={@generic="4e3394b91b70ee73be915f8cc3a420fe", r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$mice(&(0x7f0000ecc000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x18000) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000c8f000)={0x8, 0x7, 0xa17, 0xff, 0x8001, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000acd000-0x68)={0x0, 0x2, 0x5, {0x0, 0x989680}, 0x6, 0xfffffffffffffede, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) listen(r0, 0x6) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000273000)={@rand_addr=0x5, @local={0xac, 0x14, 0x0, 0xaa}, r3}, 0xc) 2017/12/05 13:37:25 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f42000)="2f6465762f6b766d00", 0x8000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r1, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:25 executing program 1: mmap(&(0x7f0000000000/0x9c5000)=nil, 0x9c5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80803, 0x6) r1 = shmget$private(0x0, 0x1000, 0x1f, &(0x7f0000788000/0x1000)=nil) shmat(r1, &(0x7f0000969000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) clone(0x0, &(0x7f00009f4000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000544000-0x1c)="") time(&(0x7f0000208000-0x8)=0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00007f6000-0x8)={0x0, 0x0}) mmap(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f000012e000)=0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00002c2000)={0x0, 0x1}, &(0x7f00002b9000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00007ff000)={r4, @in6={{0xa, 0x3, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) rt_sigpending(&(0x7f00009c5000)={0x0}, 0x8) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00009c8000-0x18)=@add_del={0x2, &(0x7f00009c7000)=@common="62637368300000000000000000000000", 0x5}) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00009c5000)=0x8) mmap(&(0x7f00009c7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00009c7000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) rt_sigpending(&(0x7f00009c7000-0x8)={0x0}, 0x8) write(r0, &(0x7f000013f000)="220000001d000701fffe0008090700000c0010009509000000000000000100a4455c", 0x22) mmap(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r0, &(0x7f00007f4000-0x38)={&(0x7f000008d000-0x1c)=@in6={0xa, 0x0, 0xffffffffffffffc0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x537a5bb}, 0x1c, &(0x7f000011c000)=[{&(0x7f00002d9000-0x8c)="a58eaea880b503076a080936dc1e858b21499b5371b0dcab00d5e7f638057ee569acbb785917491b82b39e57b5ab5092c4ef56f75dbac2f2bf8ce2da3386dd003f7ba358f121a24d9f91506774e0782fbcb8f413e243bbd9999e188f7d38c89c6db1d341a528c3d045a279644b95a8ab3607efb572b25cbbde831902c5043babd0bf94d03b45982b4164e153", 0x8c}, {&(0x7f000080a000-0xc9)="0aa813ac38c25c386051e9f4236e74181da2f6748b6576ce38daeadeabb9b6a3123ff5dba24836c00344af4a0aab231b6e1f48a2755c8bb0d60d5d805987aaf6692d3d4c75ae475d5b82a3e902ddce5e1198b4eedb6895e0f45f4e52757c3676e8cc39a588a1931bc204f3a84537313441e27882fc4979537bc79be46d888fcd75c2b8353724549eacee2b06b2797a7ddde694de29c78cff1a017220ac8b964f4b88c56360090849ea1c138c86f19ff987c43e2fe06d6fd8e446da55f51f5736afbbc7dce3b19c9da9", 0xc9}, {&(0x7f00004ef000-0x74)="4e6d02fb9f09e7f441ff4f31f58719a43a736228796432762bdb40497eea0d09685cd25287d88df0550a44384b62d21a3e3d7993b1ba603a32a0edecc6a058351a522280ce80c57997089832e900ca0233bcdab55a0bbf880e62a69372e9647cc1d40ab887ccbdd754da4513ebeeecbd5bece38b", 0x74}, {&(0x7f00009c6000)="b912b32a2e23b21231a2eeb43c7d520742c7be0d4f8ae628fb207f57779e5bb8619442130b3688cbd2078dcd865b0f3ef99c74c05cb85a0aa9357600d126c7b0d64d835509dffa3f31585d61986fd78982d70ca09af544a963e2142488d88832d821d6fd84db19ac2920fadcb6ea2317e3342db606c7a873845389c947ee379bde145be29b", 0x85}, {&(0x7f000066c000)="71cae34ebaa6d4857c74b0baea10a1deb3d74a09bddc383754afdbf0c560b2cd797295e7e5158290eb9a10aefc5f5f", 0x2f}, {&(0x7f00007ba000-0x97)="19d22f3ecb154ca24dbd962e9b35ff59f28a9914cd65f55d10292e34653ba81a64922686d1fa856e7bd5746103782a51610173ad3b3c1e1f6b6b7746bd1542aa41f056a04a4e96beab522b282924a0a1af736d392e0266f9f72d5b25dddbb01074dea4f136eb2d8168a8881e70abe4ce45d635a23f40fbc9ae48c7c1ada9d504475e53ee44a720e478277a534baad38b81fdd50e57a70a", 0x97}, {&(0x7f00009c7000-0x1000)="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", 0x1000}], 0x7, 0x0, 0x0, 0x80}, 0x8001) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000886000-0x14)={0x0, 0x2, 0x6, 0x0, 0x1, 0x4}, 0x14) 2017/12/05 13:37:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) fcntl$setpipe(r2, 0x407, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) [ 134.995387] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.995627] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.995637] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.995691] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.995768] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.995778] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.995927] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.996048] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.996185] binder: undelivered TRANSACTION_ERROR: 29189 [ 135.155923] binder: 16557:16560 ERROR: BC_REGISTER_LOOPER called without request [ 135.163551] binder: 16560 RLIMIT_NICE not set [ 135.179567] binder_alloc: 16557: binder_alloc_buf, no vma [ 135.179594] binder: 16557:16574 transaction failed 29189/-3, size 0-0 line 2870 [ 135.188183] binder: 16563:16570 ERROR: BC_REGISTER_LOOPER called without request 2017/12/05 13:37:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000034000-0x1c)=[@in6={0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000a6e000-0x8)="2e2f66696c653000", 0x80000, 0x1) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000f17000)={0x7, 0x8, 0x4, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:25 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r1, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 135.188196] binder: 16570 RLIMIT_NICE not set [ 135.196627] binder: 16557:16574 ioctl c0306201 2000dfd0 returned -14 [ 135.219005] binder: 16570 RLIMIT_NICE not set [ 135.224851] device lo entered promiscuous mode [ 135.229267] binder: 16570 RLIMIT_NICE not set [ 135.230234] device lo left promiscuous mode 2017/12/05 13:37:25 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000547000-0x8)="6f6f6d5f61646a00") setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00007bc000)=0x0, 0x4) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 135.235063] binder: unexpected work type, 4, not freed [ 135.235074] binder: undelivered TRANSACTION_COMPLETE [ 135.235089] binder: undelivered TRANSACTION_COMPLETE [ 135.235097] binder: undelivered transaction 497 [ 135.248394] binder: 16563:16577 ERROR: BC_REGISTER_LOOPER called without request 2017/12/05 13:37:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f0000609000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000319000)={@generic="e00a6a5d393e404385933ba838bcded4", @ifru_addrs={0x2, 0x0, @rand_addr=0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) setsockopt(r0, 0xfffffffffffeffff, 0x1, &(0x7f0000065000)="ee70321b7cf64ee37e4e20", 0xb) pipe(&(0x7f00004cb000)={0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000156000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r3 = socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000898000-0x4)=0x0, &(0x7f000076c000-0x4)=0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) ftruncate(r3, 0x7b11a40b) close(r0) 2017/12/05 13:37:25 executing program 1: mmap(&(0x7f0000000000/0x9c5000)=nil, 0x9c5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80803, 0x6) r1 = shmget$private(0x0, 0x1000, 0x1f, &(0x7f0000788000/0x1000)=nil) shmat(r1, &(0x7f0000969000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r1, 0xc) clone(0x0, &(0x7f00009f4000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000544000-0x1c)="") time(&(0x7f0000208000-0x8)=0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00007f6000-0x8)={0x0, 0x0}) mmap(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f000012e000)=0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00002c2000)={0x0, 0x1}, &(0x7f00002b9000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00007ff000)={r4, @in6={{0xa, 0x3, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) rt_sigpending(&(0x7f00009c5000)={0x0}, 0x8) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00009c8000-0x18)=@add_del={0x2, &(0x7f00009c7000)=@common="62637368300000000000000000000000", 0x5}) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00009c5000)=0x8) mmap(&(0x7f00009c7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00009c7000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) rt_sigpending(&(0x7f00009c7000-0x8)={0x0}, 0x8) write(r0, &(0x7f000013f000)="220000001d000701fffe0008090700000c0010009509000000000000000100a4455c", 0x22) mmap(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r0, &(0x7f00007f4000-0x38)={&(0x7f000008d000-0x1c)=@in6={0xa, 0x0, 0xffffffffffffffc0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x537a5bb}, 0x1c, &(0x7f000011c000)=[{&(0x7f00002d9000-0x8c)="a58eaea880b503076a080936dc1e858b21499b5371b0dcab00d5e7f638057ee569acbb785917491b82b39e57b5ab5092c4ef56f75dbac2f2bf8ce2da3386dd003f7ba358f121a24d9f91506774e0782fbcb8f413e243bbd9999e188f7d38c89c6db1d341a528c3d045a279644b95a8ab3607efb572b25cbbde831902c5043babd0bf94d03b45982b4164e153", 0x8c}, {&(0x7f000080a000-0xc9)="0aa813ac38c25c386051e9f4236e74181da2f6748b6576ce38daeadeabb9b6a3123ff5dba24836c00344af4a0aab231b6e1f48a2755c8bb0d60d5d805987aaf6692d3d4c75ae475d5b82a3e902ddce5e1198b4eedb6895e0f45f4e52757c3676e8cc39a588a1931bc204f3a84537313441e27882fc4979537bc79be46d888fcd75c2b8353724549eacee2b06b2797a7ddde694de29c78cff1a017220ac8b964f4b88c56360090849ea1c138c86f19ff987c43e2fe06d6fd8e446da55f51f5736afbbc7dce3b19c9da9", 0xc9}, {&(0x7f00004ef000-0x74)="4e6d02fb9f09e7f441ff4f31f58719a43a736228796432762bdb40497eea0d09685cd25287d88df0550a44384b62d21a3e3d7993b1ba603a32a0edecc6a058351a522280ce80c57997089832e900ca0233bcdab55a0bbf880e62a69372e9647cc1d40ab887ccbdd754da4513ebeeecbd5bece38b", 0x74}, {&(0x7f00009c6000)="b912b32a2e23b21231a2eeb43c7d520742c7be0d4f8ae628fb207f57779e5bb8619442130b3688cbd2078dcd865b0f3ef99c74c05cb85a0aa9357600d126c7b0d64d835509dffa3f31585d61986fd78982d70ca09af544a963e2142488d88832d821d6fd84db19ac2920fadcb6ea2317e3342db606c7a873845389c947ee379bde145be29b", 0x85}, {&(0x7f000066c000)="71cae34ebaa6d4857c74b0baea10a1deb3d74a09bddc383754afdbf0c560b2cd797295e7e5158290eb9a10aefc5f5f", 0x2f}, {&(0x7f00007ba000-0x97)="19d22f3ecb154ca24dbd962e9b35ff59f28a9914cd65f55d10292e34653ba81a64922686d1fa856e7bd5746103782a51610173ad3b3c1e1f6b6b7746bd1542aa41f056a04a4e96beab522b282924a0a1af736d392e0266f9f72d5b25dddbb01074dea4f136eb2d8168a8881e70abe4ce45d635a23f40fbc9ae48c7c1ada9d504475e53ee44a720e478277a534baad38b81fdd50e57a70a", 0x97}, {&(0x7f00009c7000-0x1000)="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", 0x1000}], 0x7, 0x0, 0x0, 0x80}, 0x8001) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000886000-0x14)={0x0, 0x2, 0x6, 0x0, 0x1, 0x4}, 0x14) 2017/12/05 13:37:25 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000cc4000-0x1c)={0xa, 0x1, 0x800, @loopback={0x0, 0x1}, 0x800000000000100}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r1, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 135.248405] binder: 16577 RLIMIT_NICE not set [ 135.251734] binder: BINDER_SET_CONTEXT_MGR already set [ 135.251745] binder: 16557:16581 ioctl 40046207 0 returned -16 [ 135.251871] binder_alloc: 16563: binder_alloc_buf, no vma [ 135.251903] binder: 16563:16570 transaction failed 29189/-3, size 0-0 line 2870 2017/12/05 13:37:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000076000-0x2)="04a5", 0x2, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x1000eee, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) set_mempolicy(0xfffffffffffffffd, &(0x7f000070f000)=0x6, 0x6) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 135.258543] binder: 16557:16574 ERROR: BC_REGISTER_LOOPER called without request [ 135.258555] binder: 16574 RLIMIT_NICE not set [ 135.258635] binder_alloc: 16557: binder_alloc_buf, no vma [ 135.258660] binder: 16557:16581 transaction failed 29189/-3, size 0-0 line 2870 2017/12/05 13:37:25 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001ce000)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f00006aa000-0x1)="", 0x0, 0x4, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x7fff}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000a7b000-0xc)={@local={0x0, 0x0, 0x0, 0x0}, @empty=0x0, 0x0}, &(0x7f0000af0000-0x4)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000df0000)={@generic="4e3394b91b70ee73be915f8cc3a420fe", r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$mice(&(0x7f0000ecc000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x18000) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000c8f000)={0x8, 0x7, 0xa17, 0xff, 0x8001, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000acd000-0x68)={0x0, 0x2, 0x5, {0x0, 0x989680}, 0x6, 0xfffffffffffffede, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) listen(r0, 0x6) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000273000)={@rand_addr=0x5, @local={0xac, 0x14, 0x0, 0xaa}, r3}, 0xc) [ 135.258883] binder: 16563:16577 got reply transaction with no transaction stack [ 135.258893] binder: 16563:16577 transaction failed 29201/-71, size 32-8 line 2670 [ 135.272753] binder: 16557:16581 ioctl c0306201 2000dfd0 returned -14 [ 135.285540] binder: undelivered TRANSACTION_ERROR: 29189 [ 135.285550] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.291597] device lo entered promiscuous mode [ 135.297427] device lo left promiscuous mode [ 135.310281] binder: 16597:16598 ERROR: BC_REGISTER_LOOPER called without request [ 135.310293] binder: 16598 RLIMIT_NICE not set [ 135.362381] binder: 16598 RLIMIT_NICE not set [ 135.364695] binder: 16598 RLIMIT_NICE not set [ 135.370037] binder: unexpected work type, 4, not freed [ 135.370042] binder: undelivered TRANSACTION_COMPLETE [ 135.370056] binder: undelivered TRANSACTION_COMPLETE [ 135.370062] binder: undelivered transaction 506 [ 135.377924] binder: 16597:16605 ERROR: BC_REGISTER_LOOPER called without request [ 135.377934] binder: 16605 RLIMIT_NICE not set [ 135.381746] binder: 16597:16605 got reply transaction with no transaction stack [ 135.381755] binder: 16597:16605 transaction failed 29201/-71, size 32-8 line 2670 [ 135.394376] device lo entered promiscuous mode [ 135.398457] device lo left promiscuous mode [ 135.401928] binder: release 16597:16598 transaction 510 out, still active [ 135.401936] binder: undelivered TRANSACTION_COMPLETE [ 135.401955] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.402154] binder: send failed reply for transaction 510, target dead [ 135.431652] binder: 16619:16620 ioctl c0306201 20008fd0 returned -14 [ 135.450346] binder_alloc: binder_alloc_mmap_handler: 16619 20000000-20002000 already mapped failed -16 [ 135.458644] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/05 13:37:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000257000)="2f6465762f73657175656e6365723200", 0x80, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000cfc000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000dfd000)={@remote={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f00001b5000-0x4)=0xc) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000f6a000-0x8)={0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000aa0000)={0x0, 0x0}) capget(&(0x7f0000ddd000-0x8)={0x20071026, r3}, &(0x7f0000f8b000-0x18)={0x8001, 0x8, 0xffffffff, 0x3, 0x10000, 0x5}) 2017/12/05 13:37:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000d5000-0x8)={0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) socketpair(0x5, 0x80000, 0x2, &(0x7f00001bb000)={0x0, 0x0}) mincore(&(0x7f00000cc000/0x4000)=nil, 0x4000, &(0x7f0000ca5000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000713000-0x80)={[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:26 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x0, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000acb000)="04", 0x8000000000000007) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000ed3000+0x8d2)={0x5, 0x8, 0x0, 0x2, 0x7fffffff}) r1 = socket(0xa, 0x3, 0x3c) r2 = open(&(0x7f00004db000)="2e2f66696c653000", 0x141043, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000aeb000)={[{0x2, 0x7ff, 0x4, 0x6, 0xffffffffffff8000, 0x0, 0x3, 0x6, 0x9, 0xfff, 0xfffffffffffff800, 0x4, 0x100}, {0x3, 0x4a56, 0x5d, 0x2, 0xfff, 0x1000, 0x2, 0x1, 0x5, 0x35, 0x47, 0x6b8, 0xfffffffffffffffb}, {0x0, 0x5, 0x3f, 0x2, 0x10001, 0x3, 0x8, 0x6, 0xb47d, 0x7f74, 0x80, 0x0, 0x8000}], 0x140000000000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000ec6000)={0x0, 0x9}, &(0x7f0000e06000-0x4)=0x8) fcntl$addseals(r2, 0x409, 0x4) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x8, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0x0, 0xa00000002, 0x2000000000000, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00003ec000)={&(0x7f00006e2000-0xc)=[0xffff000000000000, 0x100000000, 0x3], 0x3, 0x6, 0x80, 0x8, 0x8, 0x1, {0x10000, 0x4, 0x3, 0x8, 0x8, 0x6ff7, 0x800, 0x3, 0x8000, 0x81, 0x7, 0x4, 0x10000, 0x4, "90b693dcd5617b08b585b17bf7e8aa4101e8f39ba79d294d6ab623f463bb40a4"}}) fcntl$getown(r0, 0x9) mount(&(0x7f0000144000)="2e2f66696c653000", &(0x7f0000eae000)="2e2f66696c653000", &(0x7f0000b57000-0x4)="6e667300", 0x2, &(0x7f000000a000)="") r4 = syz_open_dev$loop(&(0x7f0000000000)="2f6465762f6c6f6f702300", 0x0, 0x2) fremovexattr(0xffffffffffffffff, &(0x7f000014a000)=@known="636f6d2e6170706c652e73797374656d2e536563757269747900") r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000da7000-0x11)="2f6465762f7667615f6172626974657200", 0x2, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000c63000-0x9)="2f6465762f72746300", 0x8000, 0x0) sendmsg$netrom(r6, &(0x7f0000794000)={&(0x7f0000663000+0x6fc)=@ax25={0x3, {"102511d13e675f"}, 0x80}, 0x10, &(0x7f0000d51000)=[{&(0x7f00005f3000-0x1e)="10e12399a93eff728f169462fda4cb2039dd499e1df86e12d5dcbe0580e7", 0x1e}, {&(0x7f0000b7d000-0x2e)="895456f291b2aa65b6f7ba0859233c3760569c82e45c44566d389b5b07b35c3a9ce2228d0a746f283e687c2904f9", 0x2e}, {&(0x7f0000834000+0x612)="6db16de47872850247358791be358fb5d08c9327a578fb2ac8adfe3e1ba3c74b3759d765acfe11a533ba26a7b24792f333fdb9c8f4a0bdaf3ea8b3b1a76170f83dba5576700ef256cf8f9e1936402ef7b42502f302fe4a4bf9e4e29eb754d9d72e2cebad3a8b9c76bd68381b1d9f2bb378e21705d153eea24029f8c3411ed4f18cef105c1a13caa5cb32e5be966ceb2c33f97f462d2ec2da28a3cdf0f4d4504e8269d5bd3d0f7ff55ffb0d544df58d68d0b2aa0e4d0c3322b40c17d9123ccf08024081d4d2ba1de94c63a6150f02306d185cec4bbd33c984b73cd3b63415855cb51d2324", 0xe4}, {&(0x7f0000308000)="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", 0x1000}], 0x4, &(0x7f000091d000)=[{0x108, 0x1ff, 0x899, "6afce7d5824d679a7ea26bf511773a97ddc043ecd8a3ad68b7846d4e36d2c7a12959d9c8a79f67a0fbfb6ec7751bfe3e854db36ea0549192bd6fccc2a528d88f96a165274f08e953a07ad7b69d3b978f79ceb11bbb5300cfe68da0e1b47ab29bf4d05c33526e3597ff5d68483760174f72a595c8148e89ea361801b38ea8a7b2e6b97f7009a8dfc899c0c5ca6aaf57e6366f0000027657cc1f39273c664a8992c613b2c413fc7e3b00c812d0f6d3e080054d0707eaf9dc7b1cf28af7329ea9f91b3be10a3d7b98ffeab67bf7358a612720d5c9b88bf59ce33a95cbc5a548902818959d6d710fda2b51e380ed03f01ac871b935"}], 0x108, 0x1}, 0x4010) getpeername$packet(r5, &(0x7f000031d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f00009c5000)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000005000)={@loopback={0x0, 0x1}, 0x8, r7}) r8 = add_key(&(0x7f0000b95000)="646e735f7265736f6c76657200", &(0x7f0000e04000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f000062b000)="a6891ba52d71183817677a19ffa80dbaafbe4c054cde3380ce846831b6364b2c4235e2e1cd74e665d7f7a77efefb082a053314050bc62e3cfeca10d97db5b300f343b24711550f8fe258e44d65fba8a1cfe58105efe2163b7ec1ce37ae998fdf3b162028f198570a17ba517a79729c239f65e85eb9908f90f55343688bb0869f48020865cb28914dd58c4bd20af376b4b65e11a4f69c924434ba19350275ccca61f5855549a4caa7f660f34aa8eda3086e6452f8bca8877f1f30eb97dd7a858363a85847deefc581a330ad3493ec5f9e7a2e", 0xd2, 0xfffffffffffffffb) add_key$user(&(0x7f0000aec000-0x5)="7573657200", &(0x7f00006c6000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000d62000)="0b36634d92e7e518996d76bbac74fc94514925d1b94e525787b4aefbc3e8f7520da7d11d", 0x24, r8) fallocate(r4, 0x3, 0x200, 0x44400006) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00005b2000-0x8)={r3, 0x3ff}, &(0x7f0000789000-0x4)=0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x80000040fe, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r5, 0x540f, &(0x7f0000edb000)=0x0) sendmsg$nfc_llcp(r6, &(0x7f000067b000-0x38)={&(0x7f0000eb5000-0x60)={0x27, 0x85, 0x4, 0x7, 0xd83, 0x1ff, "10f1a13618ccbae458ce765a1cce4100c9d335f32b78a52e38882805050b0b031219d4f64f132a9c0aa09b10105caff0785426b2ea0acf091582400043a2b5", 0x1}, 0x60, &(0x7f0000bc4000)=[{&(0x7f00005f1000-0x50)="79401f2f3f0c3e05774e22a6f693184e462934d757c7f98a59ed04eafca2e6b30b94a0ca7a5e58046d9f6d1a1f649c82cdcbf07a23c71661977dfc3489a00c790ec786007e6ce438ba5babe6de4c67f2", 0x50}, {&(0x7f0000ebf000)="a90838040ada7c37944a1f13015f78ab79c11b1dcfebd177b31b12dc8270f267cc0ce432399509402c85d581607347052d0d0292ca43a160c18c59abc1e5b76a5c23d061e169e1", 0x47}, {&(0x7f000090f000-0x1000)="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", 0x1000}, {&(0x7f0000393000-0x43)="b3e8ec3bcc2fe304c34f9e008ca6bad90f4bd979b9cd6de15f3497a30140442a0fb12152dea826fe06e4cc5fd82ac83febc5c71fa02862986fe08896eda0718e47a729", 0x43}, {&(0x7f00003c4000-0x41)="20d126514c1a97b6735f87580b68a63643c0eced8d44162fc319a5afb665a0115ca9a9d7b25b84c29d4ee49b86fd548cdd8dfe1f4f5df6b855d7c253a7783ca7f2", 0x41}, {&(0x7f0000e14000)="97588abebeb254049b16f31490bdfa1035133ced2c45ef44ab8a9f890e2583ebe2b0407d79c1b3e5171f2c4aa2c281ce4b8a48180e2dd8bfcb1a259a84c408b9db466224c8c8389f0cd7bad5051034a8d0c1bab77ca614e3980b4a86cce3fdc4c544653b0c8e28d7dcb94206d5179ca722517d99a167eba4ea2b0d3f7a39c47cb805394f0ef9fcd2ad739b984f9d8b8260fe94b4a67f8d667ba72c64ec4a88f762a3c777918b4022866edce98e3497a35076d572ff97e7237e87008f6ec01c535fd7363abd3bf834460a3f776bce63db4715e249ccc2475ded20c0376a319a8b3d", 0xe1}, {&(0x7f0000871000-0xe6)="382fe5eb2376fda66f4c55c9bf1fd4dda7a13a619a9eb17ca6fc730c07dbf49459b9d76bae16b4d862ecc7f0d007c7e48e2fd53f271621adfd862e041646c7199c043b435c3beba8afcebc58b22ebb66d453236c97a058f2245ef56d5465081584f33ae5d34eac60423700d778219ad564794009fdb64024e1f59b608e177b7fa3dfc8d4f8f1a2a1c9f7eab751746787f274bca7a824aba642865a7fa977f159cddbacb18402f5aae46e9d0469f535a4b2bed34d11a8de237a3c83f0a6a1e31b50625045fd73e946e0afc9876d5a79be1748de81a1785778af48446fb6c2c0e93d63c614a1c1", 0xe6}, {&(0x7f0000a2f000)="120269a140bc83e50acb1e25a77226218e9c163aa4a69285c3c277ae5baa3c5e40e30505e53f14b24afba1c6e55b121de9604736761681c2f7883e230aeda39d84a4d677c39adaa892ff62cf", 0x4c}, {&(0x7f0000eaf000-0x77)="29122f8ac472962c15a366c32c4a47aac5fd2db9ae60e5ec33ee472d726c0a3c4db5b8bb6031b06ab7efb6e9dcb3cd2fa80c80522ce53e6c65998241d98f8b9636d4eed9ff8f341d8e733a341709d74dba5c6bc44f69675e0716258caca82b35cb351b6c0a93e8f24ae72d748e10a297b8a4c91898f6d1", 0x77}], 0x9, &(0x7f0000e5f000)={0x28, 0x10f, 0xfffffffffffffffe, "cb4afe3da72347f8ffe86d9accca56e60aa5f4"}, 0x28, 0x8000}, 0x4841) r9 = fcntl$getown(r0, 0x9) r10 = syz_open_procfs(r9, &(0x7f00006d7000)="6e0900000000020000") getdents64(r10, &(0x7f0000799000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x228) openat$rtc(0xffffffffffffff9c, &(0x7f0000f1b000-0x9)="2f6465762f72746300", 0x3, 0x0) 2017/12/05 13:37:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 135.458657] binder: 16619:16620 ioctl 40046207 0 returned -16 [ 135.458715] binder: 16619:16624 ioctl c0306201 20008fd0 returned -14 [ 135.460156] binder: 16619:16620 ioctl c0306201 20007000 returned -14 [ 135.462493] binder: 16619:16624 ioctl c0306201 20004000 returned -14 [ 135.478170] device lo entered promiscuous mode [ 135.486691] device lo left promiscuous mode [ 135.686712] binder: 16638:16640 ERROR: BC_REGISTER_LOOPER called without request [ 135.694457] binder: 16640 RLIMIT_NICE not set [ 135.702958] binder: 16642:16645 ERROR: BC_REGISTER_LOOPER called without request 2017/12/05 13:37:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:26 executing program 0 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) [ 135.702971] binder: 16645 RLIMIT_NICE not set 2017/12/05 13:37:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) r2 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)="2f6465762f7663732300", 0x1, 0x84882) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000119000-0xd9)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:26 executing program 1: pipe(&(0x7f00009b7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f00007a6000-0x9)="2f6465762f73672300", 0x3, 0x0) r2 = openat(r1, &(0x7f0000371000)="2e2f66696c653000", 0x40000, 0x1a0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xfb9000)=nil, 0xfb9000, 0x2000000, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8a0000)=nil, 0x8a0000, 0x4, 0x30031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000be2000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000)="2f6465762f7663732300", 0xfb, 0x20040) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) mmap(&(0x7f0000fb9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000b80000)={0x0, 0x0}) sched_setattr(r6, &(0x7f00004c3000)={0x30, 0x0, 0x1, 0x5, 0x4, 0x6f, 0x3, 0xf3}, 0x0) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$nfc_llcp(r4, &(0x7f0000fba000)={0x27, 0xfff, 0x348c, 0x0, 0x5, 0x45, "0c0fbd112fd2e8dba863b364998075a60a87801e931ffe883c5ddf8b3d77ee325536c2c69c611b8e53e9cdc678af5fc96b9ddbfc792fd1aab28f1881e24f2f", 0x3}, 0x60) r7 = syz_open_dev$mice(&(0x7f0000000000)="2f6465762f696e7075742f6d69636500", 0x0, 0x82) writev(r7, &(0x7f000000c000-0x30)=[{&(0x7f0000790000-0xc9)="00", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000dbf000)=0x4, 0x4) r8 = msgget(0x1, 0x81) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000375000-0x8)="2e2f66696c653000", &(0x7f0000fbb000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r4, 0x1, 0x11, &(0x7f0000fba000)={0x0, 0x0, 0x0}, 0xc) utimensat(r5, &(0x7f000043f000)="2e2f66696c653000", &(0x7f0000613000)={{0x77359400, 0x0}, {0x77359400, 0x0}}, 0x0) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000fbb000-0x8)="2e2f66696c653000", &(0x7f000006c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00009bc000-0x24)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, r11, 0x0]) msgctl$IPC_SET(r8, 0x1, &(0x7f00004aa000)={{0x8, r9, r11, r12, r14, 0x5c, 0x61, 0x0, 0x0, 0x0}, 0xfffffffffffffffd, 0x220, 0x8, 0x0, 0x6, 0x2, r6, r10, 0x0, 0x0}) 2017/12/05 13:37:26 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 135.724190] binder: 16638:16651 got reply transaction with bad transaction stack, transaction 515 has target 16638:0 2017/12/05 13:37:26 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f6465762f73657175656e6365723200", 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = msgget(0x1, 0x20) msgctl$IPC_RMID(r2, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000199000)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0}, 0x14) 2017/12/05 13:37:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000066b000)={0x2, r0, 0x0}) ioctl$TIOCNOTTY(r2, 0x5422) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r3 = socket(0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000090000)=0x7f) 2017/12/05 13:37:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 135.724200] binder: 16638:16651 transaction failed 29201/-71, size 32-8 line 2685 [ 135.736129] binder_alloc: 16642: binder_alloc_buf, no vma [ 135.736157] binder: 16642:16655 transaction failed 29189/-3, size 0-0 line 2870 [ 135.749524] binder: 16642:16655 ioctl c0306201 2000dfd0 returned -14 [ 135.751331] device lo entered promiscuous mode [ 135.752696] device lo left promiscuous mode [ 135.760593] binder: BINDER_SET_CONTEXT_MGR already set [ 135.760604] binder: 16638:16651 ioctl 40046207 0 returned -16 [ 135.760822] binder: 16638:16658 ERROR: BC_REGISTER_LOOPER called without request [ 135.760831] binder: 16658 RLIMIT_NICE not set [ 135.762157] binder_alloc: 16638: binder_alloc_buf, no vma [ 135.762187] binder: 16638:16651 transaction failed 29189/-3, size 0-0 line 2870 [ 135.790779] binder: 16638:16658 got reply transaction with no transaction stack [ 135.790790] binder: 16638:16658 transaction failed 29201/-71, size 32-8 line 2670 [ 135.810167] device lo entered promiscuous mode [ 135.829432] device lo left promiscuous mode [ 135.838949] binder: 16677:16678 ERROR: BC_REGISTER_LOOPER called without request [ 135.838965] binder: 16677:16678 ioctl c0306201 20008fd0 returned -14 [ 135.839523] binder: 16677:16678 got reply transaction with bad transaction stack, transaction 521 has target 16677:0 [ 135.839531] binder: 16677:16678 transaction failed 29201/-71, size 32-8 line 2685 [ 135.839651] binder: 16677:16678 ioctl c0306201 2000dfd0 returned -14 [ 135.850163] binder: release 16677:16678 transaction 521 out, still active [ 135.850171] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.850191] binder: send failed reply for transaction 521, target dead [ 135.855111] binder: 16677:16678 ERROR: BC_REGISTER_LOOPER called without request [ 135.855129] binder: 16677:16678 ioctl c0306201 20008fd0 returned -14 [ 135.857480] binder: 16677:16683 unknown command 0 [ 135.857491] binder: 16677:16683 ioctl c0306201 20004000 returned -22 [ 135.859647] binder: 16677:16683 ioctl c0306201 2000dfd0 returned -14 [ 135.879170] binder: release 16677:16683 transaction 524 out, still active [ 135.879192] binder: send failed reply for transaction 524, target dead [ 135.882810] device lo entered promiscuous mode [ 135.882957] device lo left promiscuous mode [ 135.906865] device lo entered promiscuous mode [ 135.913088] device lo left promiscuous mode [ 136.067891] binder: 16640 RLIMIT_NICE not set [ 136.068093] binder: release 16638:16640 transaction 515 in, still active 2017/12/05 13:37:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ab2000)="2f6465762f72666b696c6c00", 0x40000, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000518000-0x2)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00008ac000)="2f6465762f6375736500", 0x800, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000f9000)={r1, &(0x7f0000c8c000-0xb6)="6744bdc2a21214da142ba1f9c86e4f5c7f8fcefad627ac61a83e94f3d92d6294b6c6ec2fa20415010698cd876604a990f1659afd7c51ceb90cb9973a5c565e427c3bf0dbc1d377e8ba49446bfdec38d3c0850de4823d30fead196f3b677afa5e08c025ec713e33a0fdef8978b463b99c32c65a6a041ee016b71088216304f591050ece64b53537b102b22408f400d91248437f6014ef26e765f1962dbfffc3f42e27c30639e505198ff43de296e3fc5d026b1b45ad71", &(0x7f000014d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000ba000-0x8)=@assoc_value={0x0, 0x80000001}, &(0x7f0000ee4000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000875000-0x8)={r2, 0x0}, 0x8) getresuid(&(0x7f0000087000)=0x0, &(0x7f000038a000-0x4)=0x0, &(0x7f0000fed000-0x4)=0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000f9c000)={0x0, 0x0, 0x0}, 0xc) fchown(r0, r3, r4) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000cd4000)=@assoc_value={0x0, 0x800000000000ff}, &(0x7f0000662000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000a1000-0x7f)={r5, 0x77, "a94db394a31a3794b0d23ebc3f861aee3f7249c65755e69901a8d99d7da2151e546a5660cf925c6ee790ee296541c732b165b0a24e452d9d7ae773c4037172c4b9afc6d8fd5a9c8a6b7702394705f8e00028d58854846b0fba6fa9b4b2758c157f201493e456b33731a829d4645125ec9b6696360c438a"}, &(0x7f0000a47000)=0x7f) getpid() 2017/12/05 13:37:26 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(0xffffffffffffffff, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000f707", 0x26) 2017/12/05 13:37:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) r2 = creat(&(0x7f0000165000-0x8)="2e2f66696c653000", 0x22) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000bc3000-0x14)={0x0, r2, 0xa, 0x1, 0x0}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) [ 136.068101] binder: send failed reply for transaction 515 to 16638:16651 [ 136.068121] binder: undelivered TRANSACTION_COMPLETE [ 136.068128] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.068132] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.078844] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.078856] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/05 13:37:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f00007b7000)={0x0, 0x0}) futex(&(0x7f0000004000)=0x0, 0x400000085, 0x20000000, &(0x7f0000726000)={0x0, 0x0}, &(0x7f0000004000)=0x9, 0x401ffffffc) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) chdir(&(0x7f0000d5c000-0x8)="2e2f66696c653000") [ 136.134923] binder: 16699:16704 ERROR: BC_REGISTER_LOOPER called without request [ 136.142574] binder: 16704 RLIMIT_NICE not set 2017/12/05 13:37:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000712000-0x8)=0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:26 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="", 0x0) 2017/12/05 13:37:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:26 executing program 1: r0 = socket$bt_hci(0x1f, 0x3, 0x1) sync_file_range(r0, 0x7ff, 0x2786, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x400000000000032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000be0000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x80000000005, 0x20000004002) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000f2c000)=0x0) fcntl$getown(r0, 0x9) perf_event_open(&(0x7f000016e000)={0x6, 0x78, 0x22ab2696, 0x1, 0x3, 0x2, 0x0, 0x7, 0x0, 0xa, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x797, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r1, 0x1) r2 = creat(&(0x7f0000dcc000)="2e2f66696c653000", 0x80000001c) perf_event_open(&(0x7f0000c01000-0x78)={0x2, 0x78, 0x4, 0x0, 0x0, 0x100000000, 0x0, 0x8001, 0x0, 0x0, 0xffffffff80000000, 0x4, 0x0, 0x0, 0x0, 0x40000004000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000262000/0x4000)=nil, 0x4000, 0x6, 0x810, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000cd1000-0x78)={0x2, 0x78, 0x0, 0xffffffffffffdffd, 0x0, 0x0, 0x0, 0x80, 0x3, 0x4, 0x24, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000c00000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000fba000)=0xc) perf_event_open(&(0x7f00001bc000)={0x1, 0x78, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x3, 0x0, 0x2, 0xd24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000f8a000)=0x8000, &(0x7f0000cf3000-0x3)=0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000007000)={&(0x7f00005ce000)=@un=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000eef000)=[{&(0x7f0000941000-0xe0)="326e440dd80e598c1f1137372a2a71f57c3723d496afc0842c5db29d83f67675674cdf105ca1f86614d0ab58fce59be3f9b6bb439d2e99851723a142e5e8a10e71a91ef12f6c1013c42fc2a36b21e6b0b4693fde20d05ad82ef2468f1d0fdf27257dfa1f4c4213359ac3f47de55e9c02a2f4a3c2e08208f04d4294a21a4037a4ee1a77fb056f3ce561098ff30ce7b1aa7f99a41a36c7dc3e326336258667b52009ff01c936b5b87d8d8b424280ce7aea44d6683060a6f07b3526067f27b5e5586d7b446b810a207656ac256f6802a284d9d4267fa0c00a312694cba4351cf892", 0xe0}, {&(0x7f0000002000)="23b140e9da99b69b41c59b393c05d65f348badbd7b8e1632999abe5b12b5bb7f83", 0x21}, {&(0x7f0000ea6000)="5ce0fd47d55fce464dd95044f389ae6b7d1a0a6508f34985cdc5999d6676836e5507e041abb15dd27e7f8bfa41e6188d8138a67e66c230551a818bcc7551557262fd", 0x42}, {&(0x7f0000fc0000-0xe0)="ebfcf8c42521b983726be04f44a55495c8a06bd8b65bf83d3f216af56fb7e7c7ae16d9825430c5e62d4de8df90ef1964e7687b70670de1dfe4ce2ce33b865befb80cc753a785718b7cc2fa9719df742fe2aa7499c7076beadd6aac08b3857543c714109eb705b2b5f7d71c793f3f5ff4a55cc7d8ca90de7f5a3538848f00ff615df6fb037ce7a84db3148d7bf75352ac22d8b809b777fa2d6021698d48e299603dedd34f21767e3477f2363c11e3b6873fda0eafc59bec6c4046494f2281d19b5f65c766db9b3b7349cde8db3b1e004b84facb01135f15f119f24ec45dc89aeb", 0xe0}, {&(0x7f0000fc1000-0x1000)="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", 0xfff}, {&(0x7f000055e000-0x9a)="7a356d09b873fe728373403e5e2c8b10070a670ab66073ba62c74f422b3cbef6e020cfb676460783b4867b08ba59705999eba7b3627ee310ea10d8e43abb4027678831d127849a9c503c6881459001605781d33e424151b6cdde6813abd43ff08f5cded4da479d41743ba29adbadb19f3f2ad14ca59c2545a3abd1cad89b6cf3a4dbfec691b5f54dea79f6baf89ef25d95a570a60b0bb210ebc2", 0x9a}, {&(0x7f0000000000)="291b51ee7298b96828f0963fcff191b371399ba89db12e01e362e38faa79c38c94e664edd44b6137b7aa07fbc76281539e4d933cabe7c2be4fcd35e43c719dc4b1b72aef18b652f4c7ffcce38f22481f7bee7d1fb827e8185c27a87d31394faa00b9", 0x62}], 0x7, &(0x7f0000001000)=[], 0x0, 0x80000000}, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000842000-0x18)={0xaa, 0x40, 0x0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000c20000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1, 0x0}) r5 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000003, 0x0, &(0x7f0000003000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5456, &(0x7f0000000000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_writev(r5, &(0x7f0000032000-0x10)=[{&(0x7f000064c000-0x86)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x86}], 0x1, &(0x7f0000dbc000)=[{&(0x7f0000002000-0xcf)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcf}], 0x1, 0x0) read(r3, &(0x7f0000286000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000a50000)={&(0x7f0000428000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0xfb2000)=nil, 0xfb2000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x0, 0x6be94cc0) ioctl$sock_proto_private(r3, 0x89e4, &(0x7f0000e31000)="23606ecfb22d6a1d6fb9b2414f411c2024cda74730b9ea64aa78f117619e16654d978b21becf2de391be27654d8dc669dc9a614791fb9aa4fdfce2bbd738737bb4477e30f8d70284f07d527554021fcc1db3f229de43e49f269830fb4451e8710e3006205405b479ea6df7d748b2f608bd7ce1120745d68a195fade617222233fc0f55873a7c45e597f1184c22f623987c22a9") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000ad6000)={0x0, 0x8, &(0x7f0000bba000)=[@in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x5, @loopback={0x0, 0x1}, 0x800}, @in6={0xa, 0x1, 0xcc, @loopback={0x0, 0x1}, 0xfffffffffffffffb}, @in6={0xa, 0x0, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffb5f9c01b}, @in6={0xa, 0x2, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xa4}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}]}, &(0x7f0000e3b000-0x4)=0x10) close(r4) 2017/12/05 13:37:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r2 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000775000-0x8)={0x0, 0x5}, &(0x7f0000a4e000-0x4)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000129000-0x6a)={r3, 0x62, "54e539f8665d032a996f3c3bdcc794730ab0788523c068013fbb731aac5e971a86a29db923540b0d9bc36592f95f58a1292a8c4a13afe4eedc4ff8e61179894ba51a2ad7c9e36f9d72c582e3975f0150a15e731e922eb2fafd4ef40ac2afc863a62c"}, &(0x7f0000da0000)=0x6a) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) [ 136.162932] binder: 16701:16711 ERROR: BC_REGISTER_LOOPER called without request [ 136.162948] binder: 16711 RLIMIT_NICE not set 2017/12/05 13:37:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f000024a000-0x8)="2e2f66696c653000", 0x404000, 0x80) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000a74000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000fd8000-0x4)=0x7f) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) 2017/12/05 13:37:26 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000", 0x13) 2017/12/05 13:37:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:26 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000001000-0x1c)={0xa, 0x0, 0x1, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r1, &(0x7f0000e12000-0x1)="97", 0x1, 0x0, &(0x7f000079a000)={0xa, 0x3, 0xc7, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r1, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 136.165878] device lo entered promiscuous mode [ 136.166228] device lo left promiscuous mode [ 136.169436] binder: 16699:16717 got reply transaction with bad transaction stack, transaction 526 has target 16699:0 2017/12/05 13:37:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 136.169451] binder: 16699:16717 transaction failed 29201/-71, size 32-8 line 2685 [ 136.172081] binder: 16699:16717 ioctl c0306201 2000dfd0 returned -14 [ 136.184601] device lo entered promiscuous mode [ 136.199990] device lo left promiscuous mode [ 136.203468] binder: 16711 RLIMIT_NICE not set [ 136.206508] binder: BINDER_SET_CONTEXT_MGR already set [ 136.206519] binder: 16699:16725 ioctl 40046207 0 returned -16 [ 136.207744] binder: 16699:16717 ERROR: BC_REGISTER_LOOPER called without request [ 136.207754] binder: 16717 RLIMIT_NICE not set [ 136.207829] binder_alloc: 16699: binder_alloc_buf, no vma [ 136.207853] binder: 16699:16725 transaction failed 29189/-3, size 0-0 line 2870 [ 136.208898] binder: 16701:16711 got reply transaction with no transaction stack [ 136.208907] binder: 16701:16711 transaction failed 29201/-71, size 32-8 line 2670 [ 136.210380] binder: 16699:16725 ioctl c0306201 2000dfd0 returned -14 [ 136.224447] binder_alloc: binder_alloc_mmap_handler: 16701 20000000-20002000 already mapped failed -16 [ 136.227497] binder: 16701:16723 ERROR: BC_REGISTER_LOOPER called without request [ 136.227508] binder: 16723 RLIMIT_NICE not set [ 136.227580] binder: BINDER_SET_CONTEXT_MGR already set [ 136.227587] binder: 16701:16711 ioctl 40046207 0 returned -16 [ 136.228968] binder_alloc: 16701: binder_alloc_buf, no vma [ 136.229005] binder: 16701:16711 transaction failed 29189/-3, size 0-0 line 2870 [ 136.231184] binder: 16701:16723 got reply transaction with no transaction stack [ 136.231193] binder: 16701:16723 transaction failed 29201/-71, size 32-8 line 2670 [ 136.251115] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.251130] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.251265] binder: release 16701:16711 transaction 529 in, still active [ 136.251276] binder: send failed reply for transaction 529 to 16701:16723 [ 136.252259] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.252270] binder: undelivered TRANSACTION_COMPLETE [ 136.252277] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.297911] binder: 16742:16744 ERROR: BC_REGISTER_LOOPER called without request [ 136.297923] binder: 16744 RLIMIT_NICE not set [ 136.302405] device lo entered promiscuous mode [ 136.302583] device lo left promiscuous mode [ 136.319827] binder_alloc: 16742: binder_alloc_buf, no vma [ 136.319853] binder: 16742:16751 transaction failed 29189/-3, size 0-0 line 2870 [ 136.360132] device lo entered promiscuous mode [ 136.360233] device lo left promiscuous mode [ 136.360666] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.364660] binder: 16742:16751 ERROR: BC_REGISTER_LOOPER called without request [ 136.364672] binder: 16751 RLIMIT_NICE not set [ 136.365999] binder_alloc: 16742: binder_alloc_buf, no vma [ 136.366066] binder: 16742:16744 transaction failed 29189/-3, size 0-0 line 2870 [ 136.368192] binder: 16742:16751 got reply transaction with no transaction stack [ 136.368201] binder: 16742:16751 transaction failed 29201/-71, size 32-8 line 2670 [ 136.376164] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/05 13:37:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:26 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00004a4000)={{0x0, 0x1}, {0x9, 0xa19e}, 0x9, 0x5, 0x8, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/05 13:37:26 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d0100000000", 0x1d) 2017/12/05 13:37:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1000}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) r2 = dup3(r0, r0, 0x80000) ioctl$TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000a8b000-0x4)=0x4) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000fc4000)=0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000fcf000)=@assoc_value={r1, 0xfffffffe}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) 2017/12/05 13:37:26 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001000-0xa)="2f6465762f7663732300", 0x10000, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00005cd000-0xc)={@multicast1=0x0, @rand_addr=0x0, @empty=0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) gettid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000729000-0x10)={r2, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r1) 2017/12/05 13:37:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:27 executing program 1: mmap(&(0x7f0000000000/0x265000)=nil, 0x265000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup3(r0, r0, 0x80000) r3 = accept$netrom(r2, &(0x7f0000bee000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f000057e000-0x4)=0x48) r4 = gettid() perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000086f000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f000018a000-0x8)="2e2f66696c653000", 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x20000010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000005000)="068c09ed10dab932a2016f0cd4e41792cb049f3e", 0x14, 0x0, &(0x7f0000cfb000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000d06000-0x8)={0x7}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000004000)={0x8001}, &(0x7f0000001000)={0x0}, 0x8) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000ac6000)={0x7, 0x0, 0x5}) r7 = getpid() r8 = gettid() read(r6, &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x80) tgkill(r7, r8, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = dup(r5) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f000066d000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00002a5000-0x4)=0x2000000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00007c9000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r11, r10, 0x80000) getpid() fstat(r9, &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() perf_event_open(&(0x7f00008df000-0x78)={0x0, 0x78, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x7, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x20000002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x8) [ 136.376173] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.600877] binder: 16704 RLIMIT_NICE not set [ 136.605506] binder: release 16699:16704 transaction 526 in, still active [ 136.612411] binder: send failed reply for transaction 526 to 16699:16717 [ 136.619296] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.626935] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/05 13:37:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@alg={0x0, "0000000000000000000000000000", 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000832000)=0x58, 0x800) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000fbb000-0x8)={r0, 0x6}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0}, 0x14) 2017/12/05 13:37:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000a32000)="2f6465762f6175746f667300", 0x20000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000f7e000-0xc)={&(0x7f0000cf6000-0x8)="2e2f66696c653000", 0x0}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000c56000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r2, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000477000-0x1c)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}, 0x3}, 0x1c) 2017/12/05 13:37:27 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee", 0x22) 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(0xffffffffffffffff, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1) [ 136.640371] binder: 16766:16768 ioctl c0306201 20008fd0 returned -14 [ 136.660513] binder: 16766:16768 got reply transaction with bad transaction stack, transaction 540 has target 16766:0 [ 136.671441] binder: 16766:16768 transaction failed 29201/-71, size 32-8 line 2685 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[], 0x0) 2017/12/05 13:37:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000e6000-0xb)="2f6465762f766373612300", 0x5, 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000587000)="2e2f66696c653000", 0x1, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) 2017/12/05 13:37:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x7) bind$inet6(r0, &(0x7f0000cd7000)={0xa, 0x3, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x2000000010d, 0x1, &(0x7f00002ea000-0x1)="00", 0x1) connect$inet(r1, &(0x7f0000772000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) accept4(r0, &(0x7f00006d2000)=@ethernet={0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a56000)=0x10, 0x0) mmap(&(0x7f0000000000/0xfb0000)=nil, 0xfb0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x10000) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x35, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d38000-0xd)="2f6465762f736e642f73657100", 0x0, 0x44) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "e06594d232d12448b0c30905cebdbd09c0a763e204c2a32152615df55d05092d3c12ddd25bad4d127eb802407bc091842621790b637ae5ed23d8b2adf92fc9dd", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000afe000-0x4)=0x0) getpid() r4 = getpgrp(0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(r4, &(0x7f0000fb1000)={0x30, 0x6, 0x1, 0x28f, 0x34a128b, 0x1, 0x8, 0x4}, 0x0) r5 = fcntl$getown(r3, 0x9) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f000044b000-0x20)={0x2, 0x10000000007, 0x7, 0x7, r5}) r6 = dup3(r2, r3, 0x80000) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000727000-0x55)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0xf9c000)=nil, 0xf9c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 136.690186] binder: 16772:16781 ERROR: BC_REGISTER_LOOPER called without request [ 136.690200] binder: 16781 RLIMIT_NICE not set [ 136.693725] device lo entered promiscuous mode [ 136.698337] device lo left promiscuous mode 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="", 0x0}], 0x1) [ 136.727087] binder: BINDER_SET_CONTEXT_MGR already set [ 136.727099] binder: 16766:16794 ioctl 40046207 0 returned -16 [ 136.732790] binder: 16766:16787 ioctl c0306201 20008fd0 returned -14 [ 136.732865] binder_alloc: 16766: binder_alloc_buf, no vma [ 136.732891] binder: 16766:16794 transaction failed 29189/-3, size 0-0 line 2870 [ 136.737644] binder: 16766:16794 ioctl c0306201 2000dfd0 returned -14 [ 136.751472] binder_alloc: 16772: binder_alloc_buf, no vma [ 136.751507] binder: 16772:16799 transaction failed 29189/-3, size 0-0 line 2870 [ 136.765381] device lo entered promiscuous mode [ 136.782291] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.786923] binder: 16772:16799 ERROR: BC_REGISTER_LOOPER called without request [ 136.786937] binder: 16799 RLIMIT_NICE not set [ 136.788470] binder_alloc: 16772: binder_alloc_buf, no vma [ 136.788499] binder: 16772:16781 transaction failed 29189/-3, size 0-0 line 2870 [ 136.791189] binder: 16772:16799 got reply transaction with no transaction stack [ 136.791199] binder: 16772:16799 transaction failed 29201/-71, size 32-8 line 2670 [ 136.801371] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.801383] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.813591] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 136.850165] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 2017/12/05 13:37:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:27 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee0000", 0x24) 2017/12/05 13:37:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x800}], 0x1) 2017/12/05 13:37:27 executing program 1: mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x6, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000037f000)=0x4100000001, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000bdc000)=0x7, 0x4) mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000ff2000-0x4)=0x0, &(0x7f00002e6000)=0x4) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ff1000)={0xa, 0x3, 0xa, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, 0x1c) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f00007d1000)="35", 0x1, 0x20008041, &(0x7f0000fd0000-0x1c)={0xa, 0x0, 0x400005, @loopback={0x0, 0x1}, 0x10001}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f000031f000-0xe)={0x0, 0x6, "03503dee7e62"}, &(0x7f0000516000-0x4)=0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000716000-0xc)={r2, 0xd, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000708000-0x4)=0xa3, 0x4) sendto$inet6(r1, &(0x7f0000e2a000)="8c2fc33b216b549a14e8f4b03caf04ab3c8421d7776c91a6c0d0bdc357ef2603b3b8d7dc13a242bbe1061a120558ba847d7b83ffee0437e8437cc371cc0bcc", 0x3f, 0x800, &(0x7f0000490000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000350000)={0x2, [0x0, 0x0]}, &(0x7f000070e000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000f1a000-0x8)=@assoc_value={r3, 0x1}, &(0x7f000012f000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f000023e000)={r2, 0x7, 0x10}, 0xc) sendto$inet6(r1, &(0x7f000000f000-0xe02)="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", 0xe02, 0x404c890, &(0x7f0000dc5000-0x1c)={0xa, 0x0, 0x324, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000ecb000)=0x0, &(0x7f00008dc000)=0x4) mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x9, 0x32, 0xffffffffffffffff, 0x800000) r4 = socket(0x4, 0x400000080000, 0x1) mmap(&(0x7f000042a000/0x1000)=nil, 0x1000, 0x2000001, 0x810, r4, 0x0) mmap(&(0x7f000088d000/0x13000)=nil, 0x13000, 0x20005, 0x32, r4, 0x0) 2017/12/05 13:37:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket(0x11, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa, 0x0, 0x0}) r1 = epoll_create1(0xfffffffffffffffb) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) fcntl$addseals(r1, 0x409, 0x4000000000000008) close(r1) r2 = memfd_create(&(0x7f0000002000)="70726f636c6f7d00", 0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000a1d000-0x4)=0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000efc000)=0x0) r4 = getpgrp(r3) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000014000-0x18)={0xaa, 0xa, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000004000)=0x42) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f00005d6000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x1, &(0x7f0000108000-0x10)={0x0, 0x0}) waitid(0x3, r4, &(0x7f0000968000-0x10)={0x0, 0x0, 0x0, 0x0}, 0x1000000, &(0x7f0000c4c000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000003000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x50, 0xaf, &(0x7f0000065000-0x10)={r5, 0x0}) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r1, &(0x7f00002a8000)=@known="73797374656d2e706f7369785f61636c5f64656661756c7400") write(r1, &(0x7f000014d000)="", 0x0) 2017/12/05 13:37:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) socket$bt_cmtp(0x1f, 0x3, 0x5) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) [ 136.905303] binder: release 16766:16768 transaction 540 out, still active [ 136.905309] binder: undelivered TRANSACTION_COMPLETE [ 136.905318] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="", 0x0}], 0x1) 2017/12/05 13:37:27 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee", 0x22) 2017/12/05 13:37:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000073000)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000bb3000-0x10)="2f6465762f73657175656e6365723200", 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000cd1000)=0x0) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$TUNSETPERSIST(r2, 0x400454cb, &(0x7f0000b43000)=0xce6) r3 = dup2(r0, r0) getsockname$inet6(r0, &(0x7f0000df6000-0x1c)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000a62000-0x4)=0x1c) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00006d0000-0x4)=0x0) 2017/12/05 13:37:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 136.905342] binder: send failed reply for transaction 540, target dead [ 136.909000] device lo left promiscuous mode [ 136.921275] binder: 16824:16825 ERROR: BC_REGISTER_LOOPER called without request [ 136.921286] binder: 16825 RLIMIT_NICE not set [ 136.946116] binder: 16825 RLIMIT_NICE not set [ 136.947659] binder: 16825 RLIMIT_NICE not set 2017/12/05 13:37:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x400}], 0x1) [ 136.947945] binder: 16824:16825 ioctl c0306201 2000dfd0 returned -14 [ 136.955467] binder: 16827:16837 ioctl c0306201 20008fd0 returned -14 [ 136.956923] binder: 16827:16837 got reply transaction with bad transaction stack, transaction 554 has target 16827:0 [ 136.956935] binder: 16827:16837 transaction failed 29201/-71, size 32-8 line 2685 [ 136.959956] binder: undelivered TRANSACTION_COMPLETE [ 136.959970] binder: undelivered TRANSACTION_COMPLETE [ 136.959977] binder: undelivered transaction 550 [ 136.971140] binder: 16824:16825 ERROR: BC_REGISTER_LOOPER called without request [ 136.971152] binder: 16825 RLIMIT_NICE not set [ 136.972866] binder: 16824:16839 unknown command 0 [ 136.972877] binder: 16824:16839 ioctl c0306201 20004000 returned -22 [ 136.973785] binder: release 16827:16837 transaction 554 out, still active [ 136.973791] binder: undelivered TRANSACTION_COMPLETE [ 136.973800] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.973821] binder: send failed reply for transaction 554, target dead [ 136.974153] binder: 16824:16839 ioctl c0306201 2000dfd0 returned -14 [ 136.995271] binder: 16827:16844 ioctl c0306201 20008fd0 returned -14 [ 137.004840] binder: 16827:16844 got reply transaction with no transaction stack [ 137.004851] binder: 16827:16844 transaction failed 29201/-71, size 32-8 line 2670 [ 137.005676] binder: release 16824:16839 transaction 557 out, still active [ 137.005696] binder: send failed reply for transaction 557, target dead [ 137.018901] binder: release 16827:16837 transaction 559 out, still active [ 137.018908] binder: undelivered TRANSACTION_COMPLETE [ 137.018928] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.019108] binder: send failed reply for transaction 559, target dead [ 137.039433] binder: 16855:16857 ERROR: BC_REGISTER_LOOPER called without request [ 137.039444] binder: 16857 RLIMIT_NICE not set [ 137.039536] binder: 16855:16857 transaction failed 29189/-22, size 0-0 line 2755 [ 137.039835] binder: 16855:16857 ioctl c0306201 2000dfd0 returned -14 [ 137.058036] binder: 16855:16857 ERROR: BC_REGISTER_LOOPER called without request [ 137.058046] binder: 16857 RLIMIT_NICE not set [ 137.058104] binder: 16855:16860 transaction failed 29189/-22, size 0-0 line 2755 [ 137.060551] binder: 16855:16860 ioctl c0306201 2000dfd0 returned -14 [ 137.071096] binder: 16858:16861 ERROR: BC_REGISTER_LOOPER called without request [ 137.071110] binder: 16861 RLIMIT_NICE not set [ 137.096713] binder: 16861 RLIMIT_NICE not set [ 137.099209] binder: 16861 RLIMIT_NICE not set [ 137.104740] binder: unexpected work type, 4, not freed [ 137.104744] binder: undelivered TRANSACTION_COMPLETE [ 137.104759] binder: undelivered TRANSACTION_COMPLETE [ 137.104767] binder: undelivered transaction 565 [ 137.109641] binder: 16858:16865 ERROR: BC_REGISTER_LOOPER called without request [ 137.109651] binder: 16865 RLIMIT_NICE not set [ 137.113093] binder: 16858:16865 got reply transaction with no transaction stack [ 137.113101] binder: 16858:16865 transaction failed 29201/-71, size 32-8 line 2670 [ 137.121504] binder: release 16858:16861 transaction 569 out, still active [ 137.121511] binder: undelivered TRANSACTION_COMPLETE [ 137.121526] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/05 13:37:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008dd000-0xb)="2f6465762f6877726e6700", 0x400003, 0x0) bind$nfc_llcp(r2, &(0x7f0000645000-0x60)={0x27, 0x6, 0x4574, 0x7, 0x6, 0x6, "04ac3053bf12e4846bddfb8ed3c5720c1406b0aedf7300fbb416361bb1a18b62bb09a2f80ba28bc5f3a5c5ca29ad57b69a770f29933df8b78b9517d519d192", 0xffffffff}, 0x60) sendto$inet6(r1, &(0x7f0000638000-0x2)="44b1", 0x2, 0x1, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00004e5000-0x108)={0x20, {{0xa, 0x0, 0x401, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x1f, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r3, 0x0}, 0x8) sendto$inet6(r1, &(0x7f000055b000-0xd2)="b8", 0x1, 0xfffffffffffffffc, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2017/12/05 13:37:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000708000-0xb)="2f6465762f766373612300", 0x5289, 0x101200) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000940000)=0x0, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0}, 0x14) 2017/12/05 13:37:27 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = socket(0x10, 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000198000-0x4)=0x0, 0x4) write(r0, &(0x7f00007ff000)="240000001a0025f00001000400edfc0e800000000004980d010000000000000004ee00", 0x23) 2017/12/05 13:37:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000286000)={0x6, r0, 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f000034a000)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="", 0x0}], 0x1) 2017/12/05 13:37:27 executing program 1: mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x6, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000037f000)=0x4100000001, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000bdc000)=0x7, 0x4) mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000ff2000-0x4)=0x0, &(0x7f00002e6000)=0x4) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ff1000)={0xa, 0x3, 0xa, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, 0x1c) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f00007d1000)="35", 0x1, 0x20008041, &(0x7f0000fd0000-0x1c)={0xa, 0x0, 0x400005, @loopback={0x0, 0x1}, 0x10001}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f000031f000-0xe)={0x0, 0x6, "03503dee7e62"}, &(0x7f0000516000-0x4)=0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000716000-0xc)={r2, 0xd, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000708000-0x4)=0xa3, 0x4) sendto$inet6(r1, &(0x7f0000e2a000)="8c2fc33b216b549a14e8f4b03caf04ab3c8421d7776c91a6c0d0bdc357ef2603b3b8d7dc13a242bbe1061a120558ba847d7b83ffee0437e8437cc371cc0bcc", 0x3f, 0x800, &(0x7f0000490000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000350000)={0x2, [0x0, 0x0]}, &(0x7f000070e000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000f1a000-0x8)=@assoc_value={r3, 0x1}, &(0x7f000012f000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f000023e000)={r2, 0x7, 0x10}, 0xc) sendto$inet6(r1, &(0x7f000000f000-0xe02)="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", 0xe02, 0x404c890, &(0x7f0000dc5000-0x1c)={0xa, 0x0, 0x324, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000ecb000)=0x0, &(0x7f00008dc000)=0x4) mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x9, 0x32, 0xffffffffffffffff, 0x800000) r4 = socket(0x4, 0x400000080000, 0x1) mmap(&(0x7f000042a000/0x1000)=nil, 0x1000, 0x2000001, 0x810, r4, 0x0) mmap(&(0x7f000088d000/0x13000)=nil, 0x13000, 0x20005, 0x32, r4, 0x0) 2017/12/05 13:37:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) [ 137.121675] binder: send failed reply for transaction 569, target dead 2017/12/05 13:37:27 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f76637300", 0x10000, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x16000, 0x4002, 0x3, 0xffffffff, 0xf72}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6877726e6700", 0x202800, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x200}], 0x1) 2017/12/05 13:37:27 executing program 7: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000000000)=@ethtool_drvinfo={0x3, "c9a500767d53264fb25db64ba88208a4e1efb5afa2d20e57bbfa734cd5d9246e", "dcb2f0ffffff00000000b089f7a935f40302fccc5ee7d6ed869c474eb062c081", "b306b0b2e9a553f21e1aeba83da598443763cbe32ce12907a91269cbd82f995e", "9f9c9e2ad4667f08a9f56f9a292793093238fac08ab09a79f40c4673fcfc0007", "ccbb12acc616bdc9b0cec73927872fb6f36915a3493ed90057523a90d62598e1", "125d672f6f000266fed0dd1a", 0x7, 0x10001, 0x3, 0x0, 0x1000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000a96000-0x8)={0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x18, 0xfffffffffffffffd, 0x202, &(0x7f0000005000-0x8)={0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = accept4(r1, 0x0, &(0x7f0000003000-0x4)=0x0, 0x80800) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$unix(r5, &(0x7f0000a93000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000008000)=0x6e) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netlink(r1, &(0x7f0000005000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000a94000-0x4)=0xc) sendmsg(r0, &(0x7f0000a94000-0x38)={&(0x7f0000001000-0x60)=@nfc_llcp={0x27, 0x1, 0x400, 0x4, 0x100000001, 0x2, "489da3fbd41572222306efa5c6123517176d1021e848d96bf9316b47c19d156bc7dc246c201efd2d9fe8033b195e0c36472fa3bf927bc70ca8c17f67a89fc8", 0x200}, 0x60, &(0x7f0000001000)=[{&(0x7f0000001000)="743b64d5719e94a38e211fb3a4f78351d8838566514a920207d0459ba4ac436a8dd8031b8c2645a3ca36c1ad4c8874dc8c87", 0x32}], 0x1, &(0x7f0000a93000)=[{0xf0, 0x0, 0x7fff, "0d775ccab53258b62173b680afe59be503ba770fe91bad63c4743357acc6e4c102afaa3e76b22ad2d77343683e74667266bce2412b10ec8ba11a5a027308fcde19c1893462ad7ad9848ab9006bfd337462f8761a1d3172f4b2e5e29fee646e768e674df2cd8e814c9c1737b8b622bf5f8304859848678bd68a2f8253984af8a90d092256fac6667cabd5c6c6a5aaf58ea2734aa63fef43f4a274c333e6d0b1e70fd9ccd9813e8020ab87351c96969ed8a61d8698300441c131d5ade172688c93ecb5f30b75dff8206406124747f80311cf4865dfb6df7511136c2a3a"}, {0xe8, 0x11e, 0xfff, "2ef0dad416387407bad8859508823b34cb0d8dd467dd861cd82fda1ef28e4b7df497f47c40eccfe5aa19a6fd13905a74d4a6abf8e7821a85910b5edb5510c02cf00c40c03eee5e1c5dabc57649254df3449151b93a363cd892780b3a9a28cb1a619f276635b0365f90153a6635c10f1a6d0df99b964f8e8e2c9fbf4bd6d4fca647ecf7e222321de1b610a180eab2de6386b3e0549c66f272b799cf0006b5cbd19d1adffafc5a6238046eb7d67234cf569866ebba4137bf03e97690d4896231f100d0bbeca47c39a1b0cb5bce695c21eec17594fbec53c455"}, {0x1010, 0x139, 0x7, "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"}], 0x3, 0x8000}, 0x48851) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000008000)="", &(0x7f0000007000)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000000a000-0x13)={0x0, 0x2000000, 0x33, 0x8, 0x800}, &(0x7f0000a94000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000009000-0x85)={r6, 0x7d, "d092cfbf20b755d97a436ada64a7b3b9ebbf7968557a89fd910799cc31b6540bde741d75b1323b199e40a6511c51866380c9f6f9b2f86f584b004e92acf3c78b4bc29ce993b4b9adadbe7b177b77d4efee41a4348933449cc9487bd8d9193cf09455881d44cd4ed84f98c6cc45179d6a531384f7b60e9367049c08600f"}, &(0x7f0000a96000)=0x85) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000003000-0x6b)={r7, 0x63, "4b1fced33620581e1280831e07be4bb571421e6e4dc773e4ece886f9b753bb7a65924a29a5f0648912fc00020000f21895e1a525e3b0c6c7a1f606000000f77384d72ee0115758c376374daa2d08ba32b19f7bd6cb7898885b902f421b6a47c90ed248"}, &(0x7f0000003000-0x4)=0x6b) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000a94000)={r8, 0xfff}, &(0x7f000000b000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000a95000-0x10)={0xfff4, 0x10000000008006, 0x20000000000016c, 0xa33, r9}, &(0x7f0000006000-0x4)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001000)={r9, 0xa4, "2c4fc875ea53c2977749b7d0c305f5a91fec99ef2f4f3f7ace8cedc9e1eabd1c06e09aee062958e74311db29d749876bc91b31390fc373e3e64e7a64df5dfcf7ffb009473c704cb7349c0c0db63a019e89651b9f12ee02e1be7f1c4eac29bdb199daf2ea187806a93e5d16088dddc26a4014c95db82cc7823cd5be7701b7e9fad7a6c5e945734c21c39ca83d785b4029b8504a47a07ee39bab2232d689b6dd47de02abb9"}, &(0x7f0000a94000-0x4)=0xac) [ 137.405626] binder: 16873:16881 ERROR: BC_REGISTER_LOOPER called without request [ 137.413389] binder: 16881 RLIMIT_NICE not set [ 137.425335] binder: 16876:16883 got reply transaction with bad transaction stack, transaction 572 has target 16876:0 2017/12/05 13:37:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) msgget$private(0x0, 0x700) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) recvmmsg(r0, &(0x7f0000e4b000)=[{{&(0x7f0000d18000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x60, &(0x7f0000671000)=[{&(0x7f00006f1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000614000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd9}, {&(0x7f000006e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000307000-0xe2)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe2}, {&(0x7f0000f36000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd9}, {&(0x7f00005dd000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdb}, {&(0x7f00002f6000-0x6d)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6d}, {&(0x7f000092b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3f}], 0x8, &(0x7f000028d000-0xf)="000000000000000000000000000000", 0xf, 0x1}, 0xb8}, {{0x0, 0x0, &(0x7f0000af6000-0x30)=[{&(0x7f00001cb000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8c}, {&(0x7f0000502000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}, {&(0x7f0000c7c000-0x65)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x65}], 0x3, 0x0, 0x0, 0x3ff}, 0x0}, {{&(0x7f00004c9000-0x10)=@ax25={0x0, {"00000000000000"}, 0x0}, 0x10, &(0x7f0000fe3000)=[{&(0x7f000007b000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000462000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfa}, {&(0x7f000016a000)="0000000000000000000000000000", 0xe}, {&(0x7f0000091000-0x8d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa8}, {&(0x7f0000381000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b}], 0x5, 0x0, 0x0, 0x9a38}, 0x7}, {{&(0x7f0000e10000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10, &(0x7f000055c000-0x20)=[{&(0x7f0000c5f000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5f}, {&(0x7f0000c10000-0x5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x40}], 0x2, &(0x7f00005d2000-0xb1)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb1, 0x4}, 0x5}, {{&(0x7f00006d7000)=@in6={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c, &(0x7f0000f89000-0x40)=[{&(0x7f0000d93000+0x7ab)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xaa}, {&(0x7f0000a9a000-0x68)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b5c000-0x70)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x70}, {&(0x7f000007c000-0x80)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x80}], 0x4, &(0x7f0000678000-0xe1)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe1, 0x353b}, 0x8}, {{&(0x7f0000b29000-0xe)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f00005f6000)=[{&(0x7f0000139000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7e}, {&(0x7f0000846000-0xd7)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd7}, {&(0x7f000013f000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2a}], 0x3, 0x0, 0x0, 0x5}, 0x3}, {{&(0x7f00009a1000)=@in={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000d40000)=[{&(0x7f0000be2000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5c}, {&(0x7f0000f1e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7e}, {&(0x7f0000bdf000-0x6c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6c}, {&(0x7f000091c000-0x89)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x89}, {&(0x7f0000288000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x73}], 0x5, 0x0, 0x0, 0x2}, 0x7}, {{&(0x7f00004e6000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f000044a000-0x70)=[{&(0x7f0000981000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xde}, {&(0x7f0000116000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x60}, {&(0x7f0000aab000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe4}, {&(0x7f00001df000-0x99)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x99}, {&(0x7f00007af000-0x93)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x93}, {&(0x7f0000c23000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000224000-0x99)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x99}], 0x7, &(0x7f00001d8000-0xf6)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf6, 0x5}, 0x6}], 0x8, 0x0, &(0x7f0000ee7000-0x10)={0x77359400, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f000058c000)="2f6465762f6175746f667300", 0x127280, 0x0) ioctl$TCSETAW(r2, 0x5402, &(0x7f00007d1000)={0x7fff, 0x8, 0x8000, 0x3, 0x0, 0x7fff, 0x7, 0xffffffffffffffff, 0x7, 0x58}) 2017/12/05 13:37:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000004000-0x18)=[], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:27 executing program 1: mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x6, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000037f000)=0x4100000001, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000bdc000)=0x7, 0x4) mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000ff2000-0x4)=0x0, &(0x7f00002e6000)=0x4) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ff1000)={0xa, 0x3, 0xa, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, 0x1c) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f00007d1000)="35", 0x1, 0x20008041, &(0x7f0000fd0000-0x1c)={0xa, 0x0, 0x400005, @loopback={0x0, 0x1}, 0x10001}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f000031f000-0xe)={0x0, 0x6, "03503dee7e62"}, &(0x7f0000516000-0x4)=0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000716000-0xc)={r2, 0xd, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000708000-0x4)=0xa3, 0x4) sendto$inet6(r1, &(0x7f0000e2a000)="8c2fc33b216b549a14e8f4b03caf04ab3c8421d7776c91a6c0d0bdc357ef2603b3b8d7dc13a242bbe1061a120558ba847d7b83ffee0437e8437cc371cc0bcc", 0x3f, 0x800, &(0x7f0000490000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000350000)={0x2, [0x0, 0x0]}, &(0x7f000070e000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000f1a000-0x8)=@assoc_value={r3, 0x1}, &(0x7f000012f000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f000023e000)={r2, 0x7, 0x10}, 0xc) sendto$inet6(r1, &(0x7f000000f000-0xe02)="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", 0xe02, 0x404c890, &(0x7f0000dc5000-0x1c)={0xa, 0x0, 0x324, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000ecb000)=0x0, &(0x7f00008dc000)=0x4) mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x9, 0x32, 0xffffffffffffffff, 0x800000) r4 = socket(0x4, 0x400000080000, 0x1) mmap(&(0x7f000042a000/0x1000)=nil, 0x1000, 0x2000001, 0x810, r4, 0x0) mmap(&(0x7f000088d000/0x13000)=nil, 0x13000, 0x20005, 0x32, r4, 0x0) [ 137.425346] binder: 16876:16883 transaction failed 29201/-71, size 32-8 line 2685 [ 137.425527] binder: 16876:16883 ioctl c0306201 2000dfd0 returned -14 2017/12/05 13:37:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x200000000081, 0x0, 0xffffffffffffffff, 0x3c}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="", 0x0}], 0x1) 2017/12/05 13:37:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00007d6000)=0x0, &(0x7f0000bcd000-0x4)=0x0, &(0x7f0000770000-0x4)=0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) io_setup(0x1, &(0x7f0000b96000-0x8)=0x0) io_destroy(r1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000091000-0x10)={0x0, 0x7530}, 0x10) 2017/12/05 13:37:27 executing program 7: clock_gettime(0x0, &(0x7f0000f67000)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000112000-0x8)={0x80}, &(0x7f00008c5000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000075a000-0x10)={r0, 0x0}, 0x8) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00002cd000-0x2)=0x10000, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f00004c8000)="", &(0x7f0000000000)=0x0) [ 137.435761] binder: 16873:16889 transaction failed 29189/-22, size 0-0 line 2755 [ 137.440586] binder: release 16876:16883 transaction 572 out, still active [ 137.440594] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/05 13:37:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f000076e000-0x1c)=[@in6={0xa, 0x3, 0x4, @loopback={0x0, 0x1}, 0x80000000}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000112000)="2f6465762f73657175656e6365723200", 0x1, 0x0) getpeername$packet(r2, &(0x7f0000dbb000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000cd2000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000b47000-0x4)=0xfffffffffffffffd, 0x4) 2017/12/05 13:37:27 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000080803, 0x2200000000ff) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000617000-0xc)={0x0, 0x0, 0x0}, 0xc) setsockopt$sock_str(r0, 0x1, 0x19, &(0x7f00005a3000-0xb)="2727407d6d643573756d00", 0xb) connect$inet6(r0, &(0x7f00004f2000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00001fe000)=[{{0x0, 0x0, &(0x7f0000052000)=[{&(0x7f0000044000)="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", 0x1000}, {&(0x7f0000412000-0x7e)="ca67733595c9741909b7a5407a5c64fba2dd566b142be0666f567bdce236765d125a975350968d26087641571acf1fde3b09bc17aa2522ad3c3990912480fcd9a66e33d9688f61dfdc267c20cab93cb63053bdc27844a442c37dcee5d3e4ab1dd13bf6f8faf099d893bbb641748dff68be4118c300bf88ed216f1b8fe4be", 0x7e}, {&(0x7f0000fb8000-0x1000)="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", 0x1000}], 0x3, &(0x7f0000c89000-0x3a0)=[{0x70, 0x100, 0xefe4, "9fc3beb3d07fff643f4da720f1416cc3e3c874d2f8c443c59349a704e7e8e715812cb6cc89e2b416dc2960e7d33182812fafe317d208b59d3e21ed9f26af2d0ed28ba853574176d95cff81b1309f0a71fb922b7209b10aad0eee"}, {0xf8, 0xb3a46a742666ef1c, 0x9, "6d7d3a83852f20b50d499f33930ddbe151d51aff9f5de103c1a91f4f4e6c5b8531565d50350a20029b96bd4df9a0260a7279b2bd73d7f33eccb7847886de7a2b0bb4e9623ef87fdd3303ca589858e2c374c4fd1965b8393c3bdf5ef46236685133d20007865a0c89f3f5543b3621f305ba984c13d6ee712c6cbeb6067aaeec47b8986a4faa60291c5802405ecf9679176f931561831d3d04726277cc7111f45ff859f3d9b8da7a0cdb6e4f36ad483d28be5f10808b85479d280657af46d24436c7f31598ad5705eeb1039a9760daa0cc9500546291a2a00209fcd877fed1bf7f672a0655360c93"}, {0x90, 0xf8aaf192d308afc0, 0x4, "f1345c46453e6d23ee56a6fbb5fe6a7d8b416d0dffae9bbf1d4b9700940feea61c0151751ba9b46856d761304c96a657f56548b0c538ea5c06edfbeb56f5b0c21ed7e5eaf01f0ee6e14eca0f27c4e318ea183dd57dfacb65b46070b6c88e74475e06cde9e82ee12f1dae2ed97f5bd61e09977b61ac9cbcb1ce5b"}, {0x58, 0x11b, 0x5, "ff3f28e8573ec9a95a0603617e3abdd376360f78da9ff10f535c0ba14fd38acb3bc6d18e6fe92935b6c23f36a1c373556845329b6dd0d490ffd0395bc2f7fff3261d24"}, {0x100, 0x105, 0xfffffffffffff9cb, "091ab2f4690ee142c68364b3dc22a80a150abcb0ea0a4629cccf95455ddfdbba6c7bcb2f8b278fc65536896b02a63cc345da9f4756064108b08cedba3fdb7c3787ab3106b6ca79f47a412f10d4e971f4e795b0414902648977c30582466239494c2b369806ba7902544c44961752e7d77465f92f91954f42986b891f1d59961a902a7fe273793d19d8ce9126d96ea01af12211c29aeeea9e360caecbe436ed9ef6788063b1bc0abbd031f01ea8f45c646d45db001cc714bbede2450de8b44d38df96fc75e2f864d41bd4b8c0d4552efc9f2dba87feb8191d1a07456ddf485268fe3e902a27c8ccecaa7bbf58"}, {0x50, 0x117, 0x80000001, "25c3d2d141e21c0389e71c7260cba2194cb15af225e79da18a59c8d1b96f17fa28fa5fedb45e3d4cc563174a1b8081835e9860e4f7c97a1ce0"}], 0x3a0, 0x40000}, 0x0}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000e05000-0x4)={r0}) accept$ax25(r1, &(0x7f0000239000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000382000)=0x10) 2017/12/05 13:37:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x100}], 0x1) [ 137.440614] binder: send failed reply for transaction 572, target dead [ 137.460932] binder: 16876:16890 unknown command 0 [ 137.460948] binder: 16876:16890 ioctl c0306201 20004000 returned -22 2017/12/05 13:37:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ab9000)="2f6465762f72666b696c6c00", 0x80000, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000f29000-0x8)="2e2f66696c653000", 0x4080, 0x50) pipe(&(0x7f00007cc000-0x8)={0x0, 0x0}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000243000)={0xffff, 0xcf4, 0x2, 0x40, 0x6, 0xffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000030000)="2f6465762f6375736500", 0x200000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00005e3000)=0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000f4c000)="2f6465762f7667615f6172626974657200", 0x2800, 0x0) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000599000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000218000-0x1008)={0x0, 0x1000, "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"}, &(0x7f00000ce000)=0x1008) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000663000)={r8, 0x2}, &(0x7f000028f000-0x4)=0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000989000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000729000-0x10)={r7, 0x1, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) close(r6) [ 137.462263] binder: 16876:16890 ioctl c0306201 2000dfd0 returned -14 [ 137.492856] binder: release 16876:16890 transaction 576 out, still active [ 137.492885] binder: send failed reply for transaction 576, target dead [ 137.518415] binder: 16873:16905 ERROR: BC_REGISTER_LOOPER called without request [ 137.518428] binder: 16905 RLIMIT_NICE not set [ 137.520089] binder: 16873:16889 transaction failed 29189/-22, size 0-0 line 2755 [ 137.521716] binder: 16873:16905 got reply transaction with no transaction stack [ 137.521726] binder: 16873:16905 transaction failed 29201/-71, size 32-8 line 2670 [ 137.565084] binder: 16908:16920 got reply transaction with bad transaction stack, transaction 580 has target 16908:0 [ 137.565096] binder: 16908:16920 transaction failed 29201/-71, size 32-8 line 2685 [ 137.567997] binder: 16908:16920 ioctl c0306201 2000dfd0 returned -14 [ 137.588127] device lo entered promiscuous mode [ 137.588294] device lo left promiscuous mode [ 137.592618] binder: release 16908:16920 transaction 580 out, still active [ 137.592625] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.592643] binder: send failed reply for transaction 580, target dead [ 137.600934] binder: 16908:16920 unknown command 0 [ 137.600946] binder: 16908:16920 ioctl c0306201 20004000 returned -22 [ 137.602114] binder: 16908:16920 ioctl c0306201 2000dfd0 returned -14 [ 137.607651] device lo entered promiscuous mode [ 137.609906] device lo left promiscuous mode [ 137.619119] binder: release 16908:16920 transaction 583 out, still active [ 137.619139] binder: send failed reply for transaction 583, target dead [ 137.650879] binder: 16940:16941 ERROR: BC_REGISTER_LOOPER called without request [ 137.651428] binder: 16940:16941 got reply transaction with bad transaction stack, transaction 585 has target 16940:0 [ 137.651436] binder: 16940:16941 transaction failed 29201/-71, size 32-8 line 2685 [ 137.651614] binder: 16940:16941 ioctl c0306201 2000dfd0 returned -14 [ 137.658975] binder: release 16940:16941 transaction 585 out, still active [ 137.658982] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.659006] binder: send failed reply for transaction 585, target dead [ 137.663279] binder: 16940:16941 ERROR: BC_REGISTER_LOOPER called without request [ 137.664620] binder: 16940:16944 unknown command 0 [ 137.664629] binder: 16940:16944 ioctl c0306201 20004000 returned -22 [ 137.665989] binder: 16940:16944 ioctl c0306201 2000dfd0 returned -14 [ 137.674180] device lo entered promiscuous mode [ 137.674407] device lo left promiscuous mode [ 137.682008] binder: release 16940:16944 transaction 588 out, still active [ 137.682104] binder: send failed reply for transaction 588, target dead [ 137.724593] device lo entered promiscuous mode 2017/12/05 13:37:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="", 0x0}], 0x1) 2017/12/05 13:37:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000cbd000)={0x0, 0xf7, "e6c8d18fab2a3073aa9888e2cedf551572ce9d3d8696b78acb552a1562163f7ebcdbb7e94c8bdb2fb8bc5f7e05895067246f1dec2a961e473005d76dd82fde6ddfd1385f30132c81eff386c222b871997bcd2537b6294283758b7bf370afe26929ac88413726c84a54f1517a1f991ed7b3be0b0b82669185d16c6c689c940a3b75638672608409c9395e37ab45ae29b06a6c55e043117aeb2f63baf35d797643d25e6e7a1f87acc7af67416876e33dafafd7c4c36a1be883408aaf91f3578181b7ca77a86107f4e50c5c7d3c81569a5eca1a15371fd96e2949c4249c2cbc53c508ec1eff6a9354fe7e8151fff42a6b96e3c992d9d1ab31"}, &(0x7f0000a34000-0x4)=0xff) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f000031a000)=@assoc_value={r1, 0x7}, 0x8) 2017/12/05 13:37:28 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f76637300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000c83000)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpid() kcmp(r1, r1, 0x6, r0, r0) ptrace$setregs(0xf, r1, 0x4, &(0x7f0000897000)="") r2 = add_key(&(0x7f0000085000-0x6)="6c6f676f6e00", &(0x7f000078d000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000b90000)="", 0x0, 0xfffffffffffffffb) memfd_create(&(0x7f0000458000)="6c6f676f6e00", 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00009ac000-0x8)={0x0, 0x8}, &(0x7f00006fe000)=0x8) r4 = syz_open_dev$vcsa(&(0x7f00008ba000)="2f6465762f766373612300", 0x1a2b, 0x210400) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000f10000)=0x800, 0x4) request_key(&(0x7f0000e41000-0xd)="646e735f7265736f6c76657200", &(0x7f00005dd000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000184000)="6c6f676f6e00", r2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000aeb000)={0x0, @in6={{0xa, 0x0, 0x401, @loopback={0x0, 0x1}, 0x1f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x5, 0x7, 0x3, 0x1}, &(0x7f0000720000)=0xa0) sysfs$1(0x1, &(0x7f0000128000-0x6)="6c6f676f6e00") time(&(0x7f0000eb9000)=0x0) sendmsg$inet_sctp(r4, &(0x7f00007ca000)={&(0x7f0000109000-0x1c)=@in6={0xa, 0x0, 0x81, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, 0x1c, &(0x7f0000d06000)=[{&(0x7f00007d6000-0xd3)="bb61873c374c5a7a6aa2ec3d8a339bbf398eebef97e8b07d4ade7f596d6245fe48e6cc6af3bfc3f2597ff5b2239364f3f2207af79b8b4cb91f7464b3e643a7f13cc9cae80ef6ec65351c9d49c8b9acde2d5f0ab5bbc064741d84948336e0ef71ea8736505cabc421f53880ab2e10b34af2cc52ded8c81787cb80b2ef958fb8a1e62c0571c2e4a4a7dd656772ee7737e4a0de7612994395ed24159ab25c3a35eedbf35d02fc872754fdbd0ce4130516af7c1f2cb3d7f5142f14b63da0f6c4addc3d76287728fad0dceaf19790bc6904324e45cf", 0xd3}, {&(0x7f00009c6000-0x65)="14f6a44a501efe6852d8a4ced0c06649018d90f9ed69de973ce6c8c52b0b520d3fb2b15a361edc738dda73b87e55704b7ece90efd82bf0a462b781e217f8d1acfe79e8dfc2f6c6d597e66198a51ea5ff4e4819b42b42ee99c980b16bfc47b31c5f6450557d", 0x65}, {&(0x7f0000a13000-0xcc)="36b0c8e69a93da8f5c9c987b0d4ebdf8d3de422af794a86faeb4f0d6f7f9f53ef2da7d812ed651084c878fa38a360175ffddfc38d95862093f85161c9d7b6ead0451f1bda9598cc9dcd8e61b979cfaf9e62085aa0ba1e26acde5ca1919138d69ea8e538469b21b364fba98a387e1371c5d8bee991074a9afee7c71154280ccaf55f492165d1b57f67a51a698270ae6b95ebeefdef946bed6deb0fd943bf8f73a628d0f64ef67c9cab897c712896026162d6708fd57111c09048280893dcea30817a71121c02622eab31b3aab", 0xcc}, {&(0x7f000076a000-0x7)="f2ff41b72a65b0", 0x7}, {&(0x7f0000844000-0xf8)="500b58f9bc3e9c6f9edb047b7ec9fb4f9c6bf41776b5dc0aaa7e067509caaefb2cec086d66760dccb9994356a50b69ef218cb869bfee8c572815d66f53dc958af4442e58accde4d232a349732964e3e88d27a358c760ad2fbf6b9286d78a57a0f435c3d056b7ce0b859ca378083c17730939510b10310d0c720c84c923e5628409efd286bac7a8ebab247ac4f77823c849294f037109fd3651163f2c822abd3293c722ade4d19120d8c0a1c763e2945ea4776c7b5d970f0bec8632f28cc52d7ca99d0265cc4460b9ac4e15959d72b10a907df77b337a8a192505ed86a306e662239e54bc05ba63f52f0e1b31fda969817afd2cd725d8fdc7", 0xf8}, {&(0x7f0000ff1000)="ef56d61df0e3dcf1d947e6cfb477ee845eb2287818dd5ed13541b9eefa02e4d0a2", 0x21}], 0x6, &(0x7f00009c6000)=[@init={0x18, 0x84, 0x0, {0x4, 0x1, 0x3ff, 0x4}}, @init={0x18, 0x84, 0x0, {0x7fffffff, 0x5, 0x2, 0x6}}, @init={0x18, 0x84, 0x0, {0x8, 0x0, 0x0, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0xfa, 0x9, 0x1, 0x9, 0xfffffffffffffe01, 0x9, 0x0, 0x1, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x7, 0x208, 0x4, 0xfffffffffffffff7, 0x17, 0x91, 0x6, r5}}], 0x5, 0x40}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00003ba000)={&(0x7f0000df6000)=@in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000344000-0x40)=[{&(0x7f0000f6c000)="25c53c20f88c2216fcb5919eea970fb9e223b244702db57be3f689e9c710c385c40e88cc6d0ca220ef8a5cfc625b8b5330ddaec9dc975171ac65ae710b76d95ebb5e42507ac7f8aa79f00a70b02a6713f4eaa3b00ecab86acad8f64ac43200fdb19a62fe3e6ad28b6e53dba774cc1d8e28152c1778e9039f0d606cfed6237d43e78736d11794e2da61d14b3e70283f655c3ed46ab9124cd5d22ad25ab7908141785b2987ce2d67a87f22ae7ffabe09e66c941367db769c4f2c7f172bf8d89eeacf5279994156ba9133850fdd82fd2eccb2174429b127", 0xd6}, {&(0x7f0000116000-0xf8)="b3b8b5b5fbe78856bd65f3f6fabc8743a75cc2c17104a8a50b7346d0da94f6163fd62def98aa00a768bb9bb85ee9c63e2979285eec00480d0063438f72a56bbdd860b276fb6a97665b3b5890fe3a2d511d9d8ef1e6c25db12da97834a5cf13b5ba98f131d334e380fed9e9274a3b84ba4f7c39cabff4f1d850e29b225fdf88134a224dc2ea1ea5e2b629c51a0fedbd5c3e90cc63543f7267655603b0573a4372909aa5a9b3d2075681c94799f4cbdf583981ded7d9e2cef61abe9bc6a19c1cc913499fed71b3ff2affa1466eece7d0e0c283a20e1e8b8cfb19228ded41a9a2e1a654b5f69897ee3fc74921786f0ec6d8407ceed04c15db8a", 0xf8}, {&(0x7f00005a5000)="8e13a6158e22ecb829620057d21d9d881402950ae7459154821fc25ca8947315b3808323d946f1f5a5d2b5689912e121641153c6fed69e7a073238a0d2f48777a4f2e92d96b96114bec7e21dea966bee02a23251a224a39fe5c6e58a0207efb7679efa1e95ef697d4410be261e90ce9e6605792a8a5138c3d25fc7cef348c72f5c006f4a830ff0843012d1dd05b21f157027fee23207a50ed1e952e4df40fe0577a7244f54522762c83ed571f823a0e2963f", 0xb2}, {&(0x7f00007d1000-0xda)="9180d032181ab845597a5163b05a3c9238251e70e1b7453f91a78d7a3db1b2e15c56af39c95ab039c4de1aa5f484a0c0b8ed8b3a84f4195b958449567372431faec306b8b14cc186d07ac4ae64f931b8d44caca1a9675b1d14fecc83cf55f37f2a8c941c12a4a7efc75b6eba268c28beec7e0aedefc4511396c4327b422dc0b285080dae2c05e83e60388f0a2b65e9a6f1f3a1748f5a64270c868175e65b636b7859e8790a11b6e89be6b55be7079d0b2bf6a22cd881fdc376fb0efbbde006f31123508305f7f924c5b4a6dba61923fc396b3b1a628752318e6e", 0xda}], 0x4, &(0x7f0000721000-0x1e0)=[@sndrcv={0x30, 0x84, 0x1, {0x100000000, 0x0, 0x8000, 0x4, 0x63f4, 0x2, 0x38, 0xffffffff, r5}}, @init={0x18, 0x84, 0x0, {0x2, 0xea7, 0x4, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x81, 0x202, 0x23, 0x5400000000000000, r3}}, @init={0x18, 0x84, 0x0, {0xf627, 0x0, 0x6, 0x7fffffff}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x6, 0x0, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x10001, 0x2, 0x8000, 0x3, 0x800, 0x8, 0x3ff, 0x6, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x7, 0x0, 0x33c5, 0xffffffffffff0000, 0x80, 0x4, 0x20, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x80000001, 0x8, 0x100, 0x3, r5}}, @init={0x18, 0x84, 0x0, {0x30, 0xfffffffffffffff9, 0x8000, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0xb4, 0x200, 0x6, 0x1f, r3}}], 0x1e0, 0xbedb92bc7e431f88}, 0x24040880) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000ad6000)={r3, 0x2, 0x9, 0x9c, 0x4, 0x8, 0x1c8, 0xfffffffffffffffb, {r5, @in={{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x400, 0x92, 0x40, 0x1cc}}, &(0x7f0000627000)=0xb8) add_key(&(0x7f000033a000)="2e6465616400", &(0x7f00000b1000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00001d9000)="3084", 0x2, r2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x101) 2017/12/05 13:37:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000650000-0xc)="2f6465762f6175746f667300", 0x20001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000224000-0x2c)=[@in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}], 0x1c) sendto$inet6(r0, &(0x7f0000aae000)="97", 0x1, 0x0, &(0x7f0000578000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000929000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab6000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000974000)=@assoc_value={r1, 0x0}, 0x8) sendto$inet6(r0, &(0x7f000055b000-0xd2)="b8", 0x1, 0x0, &(0x7f0000fcd000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) chroot(&(0x7f0000e93000-0x8)="2e2f66696c653000") 2017/12/05 13:37:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003000-0xa)="6d6f756e74696e666f00") mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x24, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade69"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000c000-0x80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f000000a000)=[@fda={0x77622a85, 0xfffffffffffffffe, 0x0, 0x0}], &(0x7f000000b000)=[0x0]}, 0x0}}], 0x0, 0x0, &(0x7f000000b000)=""}) r3 = mmap$binder(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x9, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000e000-0x30)={0x54, 0x0, &(0x7f000000e000-0x54)=[@request_death={0x400c630e, 0x3, 0x4}, @increfs_done={0x40106308, r3, 0x3}, @request_death={0x400c630e, 0x4, 0x0}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, 0x0}, @dead_binder_done={0x40086310, 0x4}], 0xca, 0x0, &(0x7f000000e000-0xca)="1225bd0ce6ffb6fa93cf990803ad59007904cf4b9e3e9f751ec47ac3d78c463c71d1cc332cbe58ac10d8f7d804b3a71fe6a42646114256e38e1a447e77ee7b5b5f1c97e00b8c8825dc1c49e0ddb38c1c4debf80fe13a47beb301fbc48a73ff1659ef4250e4f31cfd1b0c21e1a87daac317e82f472d4505fc504658004b7993de11233f60a90e1ce034b8a8ca176854e93fc8ab9d3a176b3176ceaa6264440169da3e1c391b9592da7da35c2da55de5e768150f513572bd99103a2c99afc207d122e62911a1c890d14aa9"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f000000c000)={0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00009d3000-0x80)=[{&(0x7f0000f5b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000b58000)="", 0x0}, {&(0x7f00009d2000-0xe7)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}], 0x3, 0x54) 2017/12/05 13:37:28 executing program 1: mmap(&(0x7f0000000000/0xfeb000)=nil, 0xfeb000, 0x6, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000037f000)=0x4100000001, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000bdc000)=0x7, 0x4) mmap(&(0x7f0000ef0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000ff2000-0x4)=0x0, &(0x7f00002e6000)=0x4) mmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ff1000)={0xa, 0x3, 0xa, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, 0x1c) mmap(&(0x7f0000eef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r1, &(0x7f00007d1000)="35", 0x1, 0x20008041, &(0x7f0000fd0000-0x1c)={0xa, 0x0, 0x400005, @loopback={0x0, 0x1}, 0x10001}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f000031f000-0xe)={0x0, 0x6, "03503dee7e62"}, &(0x7f0000516000-0x4)=0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000716000-0xc)={r2, 0xd, 0x30}, 0xc) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000708000-0x4)=0xa3, 0x4) sendto$inet6(r1, &(0x7f0000e2a000)="8c2fc33b216b549a14e8f4b03caf04ab3c8421d7776c91a6c0d0bdc357ef2603b3b8d7dc13a242bbe1061a120558ba847d7b83ffee0437e8437cc371cc0bcc", 0x3f, 0x800, &(0x7f0000490000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000350000)={0x2, [0x0, 0x0]}, &(0x7f000070e000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000f1a000-0x8)=@assoc_value={r3, 0x1}, &(0x7f000012f000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f000023e000)={r2, 0x7, 0x10}, 0xc) sendto$inet6(r1, &(0x7f000000f000-0xe02)="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", 0xe02, 0x404c890, &(0x7f0000dc5000-0x1c)={0xa, 0x0, 0x324, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000ecb000)=0x0, &(0x7f00008dc000)=0x4) mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x9, 0x32, 0xffffffffffffffff, 0x800000) r4 = socket(0x4, 0x400000080000, 0x1) mmap(&(0x7f000042a000/0x1000)=nil, 0x1000, 0x2000001, 0x810, r4, 0x0) mmap(&(0x7f000088d000/0x13000)=nil, 0x13000, 0x20005, 0x32, r4, 0x0) 2017/12/05 13:37:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000599000)="01000000f6ff060000070000009139cc", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000c22000)={@common="6c6f0000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000dc000)={0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000092000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00002cc000)={0xffffffffffffffff, &(0x7f0000c6f000)="", &(0x7f0000eb1000-0x1)="", 0x0}, 0x20) accept$ipx(r0, &(0x7f0000012000-0x10)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000c32000-0x4)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000016a000-0x20)={0xffffffffffffffff, &(0x7f0000e1d000-0x1)="40", &(0x7f0000bdb000)="", 0x0}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e4e000)="", &(0x7f0000326000)=0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000729000-0x10)={r1, 0x1, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) close(r0) r4 = dup2(r0, r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000d09000-0x98)={0x0, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, 0x0}, &(0x7f00007ed000)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000383000-0x6)={r5, 0x670aa77e}, 0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000e4c000-0x14)={r0, r4, 0x3, 0x1, r3}, 0x14) [ 137.724773] device lo left promiscuous mode [ 137.913831] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.922529] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.928050] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/05 13:37:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000)="6e65742f7463703600") readv(r0, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x80}], 0x1) 2017/12/05 13:37:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x7, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000e39000)={0x95, 0x101, 0x0, 0x5, 0x4, 0x0, 0x3, 0x10001, 0x0}, &(0x7f0000ff9000-0x4)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00004ad000)={r2, 0x1c, &(0x7f000013e000)=[@in6={0xa, 0x2, 0x7fff, @loopback={0x0, 0x1}, 0x0}]}, &(0x7f0000c16000-0x4)=0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00007d7000)={0xfd, 0x0, [0xc1, 0x128, 0xffffffffffffff7a, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000199000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000f23000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000be9000-0x4)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00005c5000-0x14)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r4}, 0x14) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000ea5000-0x58)={0x6, 0x80, 0x2, 0x7ff, 0x1, [{0x100, 0x3, 0x80000001, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0}]}) [ 137.958066] binder: 16951:16957 ERROR: BC_REGISTER_LOOPER called without request [ 137.965722] binder: 16957 RLIMIT_NICE not set [ 138.000283] binder: 16954:16964 got reply transaction with bad transaction stack, transaction 591 has target 16954:0 [ 138.001808] binder: 16951:16957 got reply transaction with no transaction stack [ 138.001817] binder: 16951:16957 transaction failed 29201/-71, size 32-8 line 2670 [ 138.001988] binder: 16957 RLIMIT_NICE not set [ 138.002004] binder: 16951:16957 ioctl c0306201 2000dfd0 returned -14 [ 138.008336] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.008352] binder: release 16951:16970 transaction 592 out, still active [ 138.008357] binder: undelivered TRANSACTION_COMPLETE [ 138.008507] ------------[ cut here ]------------ [ 138.008517] kernel BUG at drivers/android/binder_alloc.c:750! [ 138.008530] invalid opcode: 0000 [#1] SMP KASAN [ 138.008535] Dumping ftrace buffer: [ 138.008539] (ftrace buffer empty) [ 138.008542] Modules linked in: [ 138.008551] CPU: 0 PID: 3535 Comm: kworker/0:4 Not tainted 4.15.0-rc2+ #208 [ 138.008555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.008567] Workqueue: events binder_deferred_func [ 138.008573] task: 00000000b0354f5c task.stack: 00000000f697ae36 [ 138.008580] RIP: 0010:binder_alloc_deferred_release+0x146/0xa40 [ 138.008584] RSP: 0018:ffff8801c312efd8 EFLAGS: 00010293 [ 138.008590] RAX: ffff8801c28e01c0 RBX: ffff8801c3652d80 RCX: ffffffff8403ba56 [ 138.008594] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8801c3652db0 [ 138.008598] RBP: ffff8801c312f138 R08: ffffffff8403b9d9 R09: 0000000000000004 [ 138.008601] R10: ffff8801c312efc8 R11: ffffffff87489d60 R12: 0000000000000000 [ 138.008605] R13: dffffc0000000000 R14: ffff8801c312f110 R15: ffff8801c3652d90 [ 138.008611] FS: 0000000000000000(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 138.008615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.008619] CR2: 0000000020dc4fe4 CR3: 00000001d1793000 CR4: 00000000001406f0 [ 138.008625] DR0: 0000000020000010 DR1: 0000000020000010 DR2: 0000000000000000 [ 138.008629] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 138.008631] Call Trace: [ 138.008642] ? _binder_inner_proc_lock+0x2c/0x50 [ 138.008657] ? binder_alloc_mmap_handler+0x900/0x900 [ 138.008670] ? do_raw_spin_trylock+0x190/0x190 [ 138.008678] ? do_raw_spin_trylock+0x190/0x190 [ 138.008698] ? _raw_spin_unlock+0x22/0x30 [ 138.008708] binder_proc_dec_tmpref+0x2f3/0x420 [ 138.008718] ? binder_wakeup_thread_ilocked+0x3d0/0x3d0 [ 138.008731] ? do_raw_spin_trylock+0x190/0x190 [ 138.008742] ? kfree+0xe4/0x250 [ 138.008749] ? binder_deferred_func+0xe8a/0x12f0 [ 138.008760] ? _raw_spin_unlock+0x22/0x30 [ 138.008771] binder_deferred_func+0xe22/0x12f0 [ 138.008792] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 138.008808] ? find_held_lock+0x39/0x1d0 [ 138.008819] ? check_noncircular+0x20/0x20 [ 138.008840] ? lock_acquire+0x1d5/0x580 [ 138.008848] ? process_one_work+0xb2f/0x1be0 [ 138.008866] ? __lock_is_held+0xbc/0x140 [ 138.008887] process_one_work+0xbfd/0x1be0 [ 138.008908] ? pwq_dec_nr_in_flight+0x450/0x450 [ 138.008916] ? finish_task_switch+0x1d3/0x740 [ 138.008922] ? finish_task_switch+0x1aa/0x740 [ 138.008946] ? perf_trace_lock_acquire+0xe3/0x980 [ 138.008962] ? perf_trace_lock+0x900/0x900 [ 138.008969] ? __sched_text_start+0x8/0x8 [ 138.008978] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 138.008988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 138.009011] ? find_held_lock+0x39/0x1d0 [ 138.009032] ? lock_acquire+0x1d5/0x580 [ 138.009038] ? worker_thread+0x4a3/0x1990 [ 138.009052] ? lock_release+0xda0/0xda0 [ 138.009060] ? retint_kernel+0x10/0x10 [ 138.009070] ? do_raw_spin_trylock+0x190/0x190 [ 138.009092] worker_thread+0x223/0x1990 [ 138.009120] ? process_one_work+0x1be0/0x1be0 [ 138.009131] ? _raw_spin_unlock_irq+0x27/0x70 [ 138.009141] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 138.009149] ? trace_hardirqs_on+0xd/0x10 [ 138.009155] ? _raw_spin_unlock_irq+0x27/0x70 [ 138.009163] ? finish_task_switch+0x1d3/0x740 [ 138.009170] ? finish_task_switch+0x1aa/0x740 [ 138.009182] ? copy_overflow+0x20/0x20 [ 138.009201] ? __schedule+0x8f3/0x2060 [ 138.009206] ? check_noncircular+0x20/0x20 [ 138.009228] ? find_held_lock+0x39/0x1d0 [ 138.009243] ? find_held_lock+0x39/0x1d0 [ 138.009262] ? lock_downgrade+0x980/0x980 [ 138.009271] ? default_wake_function+0x30/0x50 [ 138.009287] ? __schedule+0x2060/0x2060 [ 138.009299] ? do_raw_spin_trylock+0x190/0x190 [ 138.009308] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 138.009317] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 138.009326] ? trace_hardirqs_on+0xd/0x10 [ 138.009332] ? __kthread_parkme+0x175/0x240 [ 138.009343] kthread+0x37a/0x440 [ 138.009350] ? process_one_work+0x1be0/0x1be0 [ 138.009355] ? kthread_stop+0x7b0/0x7b0 [ 138.009365] ret_from_fork+0x24/0x30 [ 138.009384] Code: e8 00 3e 6c fd 49 8d 7f 20 49 8d 5f f0 48 89 fa 48 c1 ea 03 42 80 3c 2a 00 0f 85 84 07 00 00 49 83 7f 20 00 74 a9 e8 da 3d 6c fd <0f> 0b 48 8b 9d e8 fe ff ff 44 89 a5 bc fe ff ff e8 c5 3d 6c fd [ 138.009514] RIP: binder_alloc_deferred_release+0x146/0xa40 RSP: ffff8801c312efd8 [ 138.009555] ---[ end trace c0af6bf11ec85878 ]--- [ 138.009559] Kernel panic - not syncing: Fatal exception [ 138.011005] Dumping ftrace buffer: [ 138.011007] (ftrace buffer empty) [ 138.011009] Kernel Offset: disabled [ 138.491567] Rebooting in 86400 seconds..