0340bc848a913f046c28d04dde25a8e5eae5cc28bfaa794482a62bf556e7fa8895c417cb59386889a3abdecacaa78ba10a189c4a354012d600f890d00000003a2f6e062ad99e8342db39fbf52d9784892182d8ff1c1417eeb16fefe8744eb05c462f85c"}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000ba0000+0xe8f)={0x0, 0x0, 0x0}, &(0x7f0000cc7000)=0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000b99000)=0x0) perf_event_open(&(0x7f000001d000)={0x10002, 0x78, 0x20000001f, 0x401, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x121a, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0}, r6, 0x4, r2, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = syz_open_dev$tun(&(0x7f0000425000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000928000-0x28)={@common="67726530000000000000000000000000", @ifru_mtu=0x6}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000af6000)={@common="67726530000000000000000000000000", @ifru_flags=0x2ff}) socket$inet6(0xa, 0x2, 0x0) dup2(r5, r0) 2017/12/02 23:46:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = semget(0x0, 0x3, 0x4) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00004ad000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000d37000-0x4)=@int=0x0, &(0x7f0000b1d000)=0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) pwrite64(r0, &(0x7f000036d000)="", 0x0, 0x0) [ 86.857452] binder: 7740:7765 BC_INCREFS_DONE u0000000080000000 no match [ 86.857459] binder: 7740:7765 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r1 = dup2(r0, r0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000472000)={0x7, 0x9d4, 0x7fff, 0x401, 0xb5, 0x7}) 2017/12/02 23:46:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x24000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r3, 0x0, 0x0) close(r6) 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="", 0x0, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000e2f000)=0x0) syz_open_procfs(r1, &(0x7f0000fab000)="6e732f6d6e7400") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) [ 86.967855] binder: 7740:7746 ioctl c0306201 20004000 returned -22 [ 86.996735] netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. 2017/12/02 23:46:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() r0 = open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) r1 = gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f000091a000)=0x0) perf_event_open(&(0x7f0000001000-0x78)={0x4, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") chmod(&(0x7f0000e70000-0x8)="2e2f66696c653000", 0x80) preadv(r2, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) io_setup(0x4, &(0x7f0000725000-0x8)=0x0) io_cancel(r1, &(0x7f0000aae000-0x40)={0x0, 0x0, 0x0, 0xf, 0x400, r0, &(0x7f00006a9000-0x25)="ac4b64295f52a18e5de29e4876bf5103aa7dbfc28583b2624c5b074479090a6d31e872ee53", 0x25, 0xe555, 0x0, 0x0, r0}, &(0x7f00006c6000+0x5b5)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000c85000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 86.999366] binder: 7802:7804 ERROR: BC_REGISTER_LOOPER called without request 2017/12/02 23:46:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$TCSETAF(r1, 0x5404, &(0x7f0000b08000)={0x7fff, 0x400, 0x4, 0x101, 0xc23, 0x1, 0x0, 0x90000000000, 0x0, 0x6db335dc}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000b18000-0x8)={0x0, 0x0}) sync_file_range(r7, 0x101000000000000, 0x9, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r8 = accept$alg(r5, 0x0, 0x0) close(r8) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000164000)="2e2f66696c653000", 0x0, 0x100) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000677000-0x28)={@common="7465716c300000000000000000000000", @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f0000fe5000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000829000)=0x14) sendto$packet(r0, &(0x7f00001d2000-0x81)="ac1362ad6a1b07b00a19bbe609afd73f6091d088472b1cc48f7a80fadcce0b50e2f4a63068fcba725ebfa895447e434385e1888bcc2a277b93df4eae31c0c04233bc654a359bf1e45add860710d94978743515e326d02ad0b42612333bafe76a501b9d223dabbb120d1d50c210399ffea252b47e0b0e51c93bc9c7e4fd0e23d29d", 0x81, 0x20003fff, &(0x7f000099e000)={0x11, 0xf6, r2, 0x1, 0x100, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x6, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="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", 0x801, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 86.999377] binder: 7802:7804 BC_INCREFS_DONE u0000000080000000 no match [ 86.999382] binder: 7802:7804 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.000173] binder: 7802:7804 ioctl 401845c0 20472000 returned -22 [ 87.007558] binder: 7802:7804 ERROR: BC_REGISTER_LOOPER called without request [ 87.007588] binder: 7802:7804 BC_INCREFS_DONE u0000000080000000 no match [ 87.007594] binder: 7802:7804 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.060356] binder: 7813:7818 ERROR: BC_REGISTER_LOOPER called without request 2017/12/02 23:46:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() r0 = open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) r1 = gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f000091a000)=0x0) perf_event_open(&(0x7f0000001000-0x78)={0x4, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r2, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000ae0000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000e41000)=[], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80003, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000c9e000-0x1)={0x100000000}, 0x1) read(r0, &(0x7f00007af000-0x58)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x58) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000fc8000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00005e9000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000804000)="2f6465762f73657175656e63657200", 0x101100, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f000027f000-0x70)={[{0x9, 0x1, 0x683, 0xe1b, 0x81, 0x9, 0x6, 0x8, 0x7ff, 0xfffffffffffffffe, 0x61, 0xfffffffffffffff7, 0x3}, {0x8fd, 0x3ff, 0xfffffffffffffffb, 0x101, 0x6, 0x2d, 0xfff, 0x8, 0x5, 0x9, 0x10001, 0x8000, 0x400}, {0x3, 0xffffffffffffffe1, 0x5, 0xfffffffffffffbff, 0x34a9, 0x8, 0x3ff, 0x0, 0x1, 0xfffffffffffffffd, 0x401, 0x3, 0x5}], 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000b8000-0x4)=0x0, &(0x7f0000508000-0x4)=0x4) socket$inet6_sctp(0xa, 0x80002000000005, 0x84) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000282000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_buf(r4, 0x0, 0x23, &(0x7f0000746000-0x58)="e4a445eb7fff050000000000000058638a2c9505f000020986c57801001e0007ea95000000b50000e6ff82e89fd0be8306a5add26c010a05b2bb00b260000000000000000038dfae358aa6fdd11ff1096e00000068b5feff", 0x58) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001000-0xc)={0x0, @multicast1=0x0, @empty=0x0}, &(0x7f0000283000)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001000)={r5, @rand_addr=0x80000000000005, @multicast1=0xe0000001}, 0xc) sendmsg(r2, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000002000-0x40)=[{&(0x7f0000001000-0xd0)="fe9a0251eea11008f2a31ef8e47de425b49e70f5f8fb5524788df8c0900e995fa8b826e2a2235d93b870e7836c0a810583179c4ef974cb42435eddc25748789614d0a60aa5129c38ff0d6cb1123db512693b917c99f0408026ca807bfffdc5f832213fd6553545a5f7196a97368a979a2933b88789c705aa66705cdec559e4e8a5aaceabeccadd4bafd1b48ac213e8d08a15d4c90a241f618e6c5f6f54462c54ece782f610c307b44cb99d32e091c153279f2a93351b06cbc5d1fc7e6b5bf969e3f119a5cbb1b72a18317019243f77", 0xcf}, {&(0x7f0000002000-0x81)="d545bb623f23415fa62fd0cb8a6a5264ad32d40ce9b32bf868dcb1637ee85d6ffc5918563ea756ed0837c8128eece87077c9ad44fc854d536f21b4c942893b18a05e7571eec2e570dc6384aa4a133512d8649aafbdd60a57c23072a0835090444dcfb920095a8a34aa82f3c1e4274b9bf8a793db7f90051f6292c853f00a8d138f", 0x81}, {&(0x7f0000000000)="2305563445e35467f8e8b0bd5c08b3c4ab9f3bc255a4a7cae8c1eb58d23d1cd9497e7a7216ab16d957e1ae310c272a5f1438edbe15de0dcb479f31", 0x3b}, {&(0x7f00004ef000-0x6b)="e8bbf91e5e53e407aa216408d6bee4f9fc172253437fe527e01384e93e908914d122ee3b5f1439bf4931b6e07c999a24c65175bb02b6cec95b1a98592af66e8239037268b2540d4fd4a0abfbc3a3f6b234558c34f8036f0d183f09bb07786cca4c143b7e8a7aeb71116df4", 0x6b}], 0x4, &(0x7f0000002000-0x198)=[], 0x0, 0x80}, 0x44002) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000001000-0xc)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast2=0xe0000002}, 0xc) socket$inet_sctp(0x2, 0x1002, 0x84) fcntl$F_GET_RW_HINT(r1, 0x40d, &(0x7f00002c9000)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f00007fb000-0x4)=0x1, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f000089d000-0x90)={0x1, {{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) close(r6) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000026000)={0x0, r1, 0x3, 0x1, 0x0}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) socket$bt_cmtp(0x1f, 0x3, 0x5) 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="", 0x0, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000711000-0x4)=0x0) r1 = getpgrp(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(&(0x7f0000d7d000-0x8)="2e2f66696c653000", 0x200100, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000917000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000500000-0x4)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, &(0x7f0000a00000)=r4) fremovexattr(r3, &(0x7f00008f9000-0x14)=@random={"73656375726974792e00", "25626465766574683100"}) bind$inet6(r2, &(0x7f0000a08000)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setfsuid(r4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000598000)=0x8000000000000009, 0x4) listen(r2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f000081d000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x6) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000f32000)={@common="65716c00000000000000000000000000", @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000cfb000-0xc)={@broadcast=0x0, @rand_addr=0x0, @multicast1=0x0}, &(0x7f0000473000)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f000091c000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000575000)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000569000-0xbe)={r7, 0xb6, "be147b62e3fbb7fc03e7d420333ee205f77227dd39911deaee98613c8f828148b3577be662a0263e58078c757e61b07247b39247671f7e4bcda1b95a491231d036a1eaa62a2fe3b344b069e19649f4f1be53d6c2030555d52f4c059de4c5ea6a248235f073440011910e876ff080be81a7079886ba5faf44f85ecc43b60c3952c1a47ef53ee137c97610725a5f60a95861ec837eb01ff9cd8eb43958f3c61235f7c77cf696877835a08dad3b400201fc83081d4343b0"}, &(0x7f00005d7000-0x4)=0xbe) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000a4f000)=0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000630000-0x20)={@common="65716c00000000000000000000000000", @ifru_flags=0x301}) recvmsg$kcm(r3, &(0x7f0000df8000)={&(0x7f00003ef000)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x60, &(0x7f00001fc000-0x10)=[{&(0x7f0000794000-0x73)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x73}], 0x1, &(0x7f00009d4000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xca, 0x9}, 0x20) ptrace$setopts(0x1004207, r1, 0x400000007ff, 0x100044) prctl$getname(0x10, &(0x7f0000df4000)="0000000000000000000000000000000000000000000000000000000000") write$tun(r6, &(0x7f00008af000-0xb0)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x4, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0x0, @broadcast=0xffffffff, {[]}}, @tcp={{0x0, 0x2, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}, 0x32) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000c08000-0xf2)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000035b000)=0xf2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000e80000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10) read(r5, &(0x7f0000225000-0xd6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd6) ftruncate(r5, 0x7fffffff) 2017/12/02 23:46:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) ioctl$TCSETSW(r1, 0x5402, &(0x7f0000f28000)={0x0, 0x584502dc, 0x1, 0xfffffffffffff001, 0x100000000, 0x6, 0x7, 0x7fffffff, 0x200, 0x7, 0x5, 0x8}) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r7 = accept$alg(r5, 0x0, 0x0) close(r7) 2017/12/02 23:46:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 2017/12/02 23:46:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$mouse(&(0x7f0000060000)="2f6465762f696e7075742f6d6f7573652300", 0x7, 0x200000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000ef4000)=@assoc_value={0x0, 0x3}, &(0x7f0000ede000-0x4)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000aea000)={r3, @in={{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f000035b000-0xc)={0x3, 0x8}) [ 87.060368] binder: 7813:7818 BC_INCREFS_DONE u0000000080000000 no match [ 87.060373] binder: 7813:7818 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.152920] netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. 2017/12/02 23:46:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() r0 = open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) r1 = gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f000091a000)=0x0) perf_event_open(&(0x7f0000001000-0x78)={0x4, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") set_robust_list(&(0x7f0000fea000-0x18)={&(0x7f0000bf8000/0x3000)=nil, 0x5, &(0x7f0000df3000/0x1000)=nil}, 0x18) r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) epoll_pwait(r1, &(0x7f0000c29000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x6, 0x3, &(0x7f0000bf3000)={0xfffffffffffffffb}, 0x8) 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="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", 0x401, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 87.227366] device eql entered promiscuous mode 2017/12/02 23:46:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) 2017/12/02 23:46:43 executing program 0: pipe(&(0x7f0000199000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000001000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000001000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000-0x4)=0x10, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001000-0xa0)={0x0, @in6={{0xa, 0x0, 0x778c, @loopback={0x0, 0x1}, 0x7fffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9dc, 0x5, 0x1, 0x100000001, 0x80000000}, &(0x7f0000d3c000)=0xa0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000354000)={r2, @in6={{0xa, 0x2, 0x6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x71}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x8}, 0x98) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f000056f000)="2f6465762f6877726e6700", 0x200000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000c29000-0x10)={r0, &(0x7f000098f000)="5afee0e7dcdf208b81fcc1a45035ac025b17fbc925b27fd41fa87eb2d272d94fff0e6525dbe6dbe944a232f742058890f319eda92ed5d34972c4079149fbae8cd1bd954ae908ae827aec06879bda885423f223cb46d08241dec320f4cae749f0e63e006395291074cfb8214166a624a34b519ce226146a2cf066194ed105bcbe46ee91714ab1e4a234fa9f8cd84779bfcb41d815f4736d544675d10b875641632c3689fb6c8e7bed0b13c9e019f298dd5a237952a2d2e4cf3727047dff5992a7dec6b1484259cb35d166dddae71677"}, 0x10) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000a54000-0x108)={0x0, {{0xa, 0x2, 0x11, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x1, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) accept$ipx(r3, &(0x7f00008a6000-0x10)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f00006bd000-0x4)=0x10) r4 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) r5 = open(&(0x7f0000690000)="2e2f66696c653000", 0x200000, 0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000b51000)=0x0, &(0x7f000047b000-0x4)=0x4) fstat(r4, &(0x7f0000e8c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r6 = open(&(0x7f000086d000)="2e2f66696c653000", 0x2002, 0x148) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f00002b9000-0x4)={0x8, 0x1ff, 0x32b8000}) 2017/12/02 23:46:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() r0 = open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) r1 = gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f000091a000)=0x0) perf_event_open(&(0x7f0000001000-0x78)={0x4, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) r2 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r2, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00005b5000)={0x2, 0x78, 0xe2, 0x1, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000f17000-0x2)="6e69", &(0x7f00007af000-0x4)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x6, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000a2f000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000f0c000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000a3d000-0x6)={0x0, 0x909a}, &(0x7f00006a0000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000101000)={r3, 0x40, &(0x7f00002d5000)=[@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000a62000)=0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r5 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000a48000)={0x0}, &(0x7f000095a000)=0x4) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) ioctl$TCSETS(r4, 0x5402, &(0x7f00005c8000)={0x3, 0x8, 0x10000, 0x2, 0x3, 0xd46, 0x4, 0x8, 0x6, 0xfff, 0x1, 0xd9e}) 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bf", 0x1, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 87.232623] binder: 7859:7863 ERROR: BC_REGISTER_LOOPER called without request [ 87.232635] binder: 7859:7863 BC_INCREFS_DONE u0000000080000000 no match [ 87.232640] binder: 7859:7863 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.234794] binder: 7859:7863 ioctl 4010aeaa 2035aff4 returned -22 [ 87.239626] binder: 7859:7863 ERROR: BC_REGISTER_LOOPER called without request [ 87.239639] binder: 7859:7863 BC_INCREFS_DONE u0000000080000000 no match [ 87.239645] binder: 7859:7863 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.249282] binder: 7859:7869 ioctl 4010aeaa 2035aff4 returned -22 [ 87.314825] binder: 7880:7884 ERROR: BC_REGISTER_LOOPER called without request [ 87.314838] binder: 7880:7884 BC_INCREFS_DONE u0000000080000000 no match [ 87.314844] binder: 7880:7884 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.359187] binder: 7880:7884 ERROR: BC_REGISTER_LOOPER called without request [ 87.359199] binder: 7880:7884 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() r0 = open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f000091a000)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r1, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 2 (fault-call:4 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000019f000)=0x0) r0 = getpid() perf_event_open(&(0x7f00005d2000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x80000040fe, 0x1, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) socketpair$inet(0x2, 0x80001, 0xb7, &(0x7f0000c2d000)={0x0, 0x0}) seccomp(0x1, 0x1, &(0x7f0000e8c000)={0x1, &(0x7f0000000000)=[{0x6, 0x100000000, 0x0, 0xfffffffffffffffb}]}) prctl$seccomp(0x16, 0x1, &(0x7f00002fb000)={0x3, &(0x7f0000869000)=[{0x2, 0x200, 0x9, 0x1000}, {0x1, 0x6, 0x7f, 0xfffffffffffffffb}, {0x3, 0x8, 0xffffffffffffffa8, 0x6}]}) shmget$private(0x0, 0x4000, 0x88b, &(0x7f0000100000/0x4000)=nil) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000657000-0x4)=0x1, 0x4) r1 = socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00002fd000)=0x4, &(0x7f0000cbf000-0x8)=0x4) 2017/12/02 23:46:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c96000-0x18)={r3, &(0x7f0000f2d000)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d24385f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="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", 0x201, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000d29000-0x4)=0x0) syz_open_procfs(r1, &(0x7f0000ded000)="6e65742f6465765f6d6361737400") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000480000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000ef7000-0x8)=@file={0x1, "2e2f66696c653000"}, 0xa) r2 = accept$inet(r0, &(0x7f0000ab8000)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000e54000-0x4)=0x10) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f00001e4000-0xc)={0x0, 0x0, 0x0}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000847000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003c3000-0x4)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00006b5000-0xc)={0x0, 0x0, 0x0}, &(0x7f00005c4000)=0xc) lstat(&(0x7f00009fe000-0xe)="2e2f66696c65302f66696c653000", &(0x7f0000797000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000ff6000)={0x0, 0x0, 0x0}, 0xc) r12 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000284000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000027d000-0x4)=0xe8) fstat(r1, &(0x7f000013b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000ee1000-0xc)="2f6465762f72666b696c6c00", 0x480, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000f97000)="2f6465762f6375736500", 0x86040, 0x0) ioctl$TIOCGSID(r2, 0x540f, &(0x7f0000af5000-0x2)=0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000c70000-0xc)={0x0, 0x0, 0x0}, 0xc) getgroups(0x6, &(0x7f0000326000)=[r9, r9, r7, r4, r17, r11]) r18 = getpgrp(r12) r19 = getegid() [ 87.359206] binder: 7880:7884 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER sendmmsg$unix(r1, &(0x7f0000379000)=[{&(0x7f0000e87000-0x8)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000d23000-0x60)=[{&(0x7f00009cf000-0x1000)="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", 0x1000}, {&(0x7f00009ba000)="", 0x0}, {&(0x7f00006e3000-0xe4)="63bdd102a5d72be09ea491af90e89c39e77eb1304ecb95d43033fc41ba2fc971d26f725836ed496bb19ee603a3d39fb962223b225ffad03df63f870f5eb4220a664be265c40f69051180f749863e77d0d70906aa9e7565bb0670cf5349b8c42470132b85150fe3aef652ffc0078ab547ea44b6915ba650095ac88f0c86831641b2bc361b8a35560acb77c877776eb4de9f1616914d92baadeccb0ae0187f406e67f96f5aab49bb94d8a6e331fab52402b00406b3e9f8ba3b8070dd66b8ff227e7e83e3656e297baf04f8c23b4fa70ff8dace1adfe0e8199333550782c5a4456eb9f746f0", 0xe4}, {&(0x7f0000360000-0x55)="610444a18f57a9e2b5fd2e4b179dcf438f1364fa253425919d9ebeabc47735af920537c7db1550ffaa03bdf93bcb1d7dd3829d78634ddd1f642b81fed13e063598113e2ae01f2b27f00323322ab34d43eeffc738e8", 0x55}, {&(0x7f0000cc1000-0x92)="5cf479fd2d704f913fc7ae4f5a60684a92b331fe363dfa6934e67c85cbcead46f13cd430639f6debc7a22b9ca27861869bc7531c5b0b30cd062bc223d2960417c7ae8d06ce37e9521eb0dcaadd052c43dafac13f686695a74219501619441c5566584c870723b2630210f7cb4b10bf7a3000f329395e8b30a3ece38a15e59c6a8a0d7f5e53eea003edaea1b395e15171a9db", 0x92}, {&(0x7f00007dc000-0xf7)="bee4119ac8e89c044dbb95d0cc049f0150c70817a4e2bbfd216f61ba33b17aa2cb07bd73cbf9d24236e796ff470fd89f10cd3900e1a7bb66a8dd244f2d5f33599aaf6ab22ea1bf8dcb9fc4d6df87b83fdbc1156d0e4a7bde6f8b3f70f2e074cd9df5c038b486509172bc07c1f7bcf3714025b874cd55e078f7e68784409ae7bca1242a6b215c0540757251d690e6cee2056dcdfb37fb1c78dcc66c072ca5599db438759b0ffbaf4ed00679f2025eae036dc08ee55ff5f5fee705a5cd8dde959d752917288d42c93cacdf0c4237b1edd41f13f0591dc4e291ba215fbd565a6d6b2827800af6d125cf5edef74528fa6615e5ebd62841a640", 0xf7}], 0x6, 0x0, 0x0, 0x800}, {&(0x7f00009cd000)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000f65000)=[{&(0x7f000057b000-0x1000)="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", 0x1000}, {&(0x7f00000c7000-0x4f)="36afcd7ee0d66db1c006f173f0a88e7f8c64bd67057c351c82f89677f480fa63e04d9d1e3ed3f6723c97bcc4c728ceb6a1809786739eba4dbf2a8ae62c2f4e0c1d02b9d61c3e4a0a69351ccdb26bcb3763fa38dc3ea800505c1ba6a3427d5ddb0dcdc75a71ec3942f948a7526fc98f6389a389f7cc46d8926c1d04fcb3bcc92ae20c786fa3a29f36c9892736007af881d2152e724a5878dd74bef9d927fca468aa33dab3c984789755ba70dc1dfdb2cdd23375df8d", 0xb5}, {&(0x7f0000f91000)="2beeff22ed524d1927f24817710932603bff40ab12535d96ec46fa", 0x1b}], 0x3, &(0x7f00006fc000)=[@rights={0x38, 0x1, 0x1, [r1, r1, r0, r1, r1, r0, r1, r0, r1, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}], 0x2, 0x800}, {&(0x7f0000644000)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000dec000-0x80)=[{&(0x7f000002f000)="1a0fe64cf0feb9c8cdfe6a5d69d13aeccedbb2cfc94e928625f38b58d95058301f8e43ee44c8a877b94ff68d74bbef4b6cccb14b55b7b1a3ecad7497d2e5fd805f1ab077ed77d7dc3f1a2e8ac0ce7ea69d155749c87c82f4d5607c6ac371de86dd970bfdd32d5df29d1e893c721646634536f8ed342082ba8bc1490219a7cef088cc6889", 0x84}, {&(0x7f000072c000)="623f7b47fcbde8c7dda3d7d41e2c5e1d65d60a3458eccb203886465c3efd5ad44b6dd1421694df5bc9f10c10bb8074c4a19d495db80e2493965c541ce993f45700f4832be5e81ab0ef51b9ad45850669242d99f1062c24978ba9e9ef50aca4aa05134f2637b932e1fae69918cae079af8768642fbd9726a3c4fe4af2c9d9981060eb60a3c3", 0x85}, {&(0x7f00000ea000)="160e5a47192f80acbf8ad853de1b61ef2ab26599c7282775dd0d7a4d01ece0c591723d3805eac39c6d410fad79faee307bf5af340bfe62bd", 0x38}, {&(0x7f000076a000)="a8145060446b57ad4af0db357b34be27351da1bc073082fe29f2e374013b655f814077589af16c31e8105a20f937de6e32fbd87884bb942075d880748cffd4fd3f95ea6b42ca16be1b90cc749714ae29b3ff419e0fb05cd45e6ec2f2b0d79b6a29fb45540eb6b0ea941744b67995855d6ebf5394960887c74c570dba4d596ccaedbd7968cd8b8c35938dca7daa62e5621332c167e72090de7e4799ec92cb2e29c90035dcc4a21a311c425bcdbf0355b6e4afcd190ff7577f71a2c36ec835d8c315a2e7ec9d3fe2018b58775d6ad523ce4c1c724a6a6cf133602adc855b6e23a423eada73f57708d1fd001e5084", 0xed}, {&(0x7f0000677000-0xe3)="753dbcd7f450a70f1f59f92d8ca8b46c2e08341247334444d76a8ed69a54fc8f60415efe3424acb44e4506b5218d03e7ec6b0b99b6a7f1b54abcc5596b85edc42fbb2143692580de9ecfdce8824a3ae3472e2f355e80cde96f53598a7f3318ef0cd8e219a755d8491a8c4316bb4c3e0b480a1b91a43235dad985638e5d780134f918826ba94e081d53b7cdbff8ca9466ac88b518c21388965926621c4af49756466d624c5c1297d308117a684aad40b6099685147ead435552cd447f964e615046921bc1fdee7c8a149de453e2b080d6bbddd5906c1b200feb2026d7596b5972f604d5", 0xe3}, {&(0x7f00005cc000)="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", 0x1000}, {&(0x7f0000171000)="1b1b82f8b1340da41340d378f52b46415af3921d8e265042f94c1f1a202add039c77d173464e30c2f460061981158703cef01d4c01ca28d12fab27a8417369972505c2e708f91be5ae90b215cd3576f84ee440f5f32229fbf8b02549926599e2cf765cddc7a8a62ec5b0f9c6369196ada9633e1a13280924121d16e4d4c1ed3ebd02e63453e81f5c107c6bb002e179ff7847498b591fccaefc967b5ac6787089c22b708b", 0xa4}, {&(0x7f000036a000-0xc)="19dbda7abf828826f8a44a1b", 0xc}], 0x8, &(0x7f00006da000)=[@cred={0x20, 0x1, 0x2, r3, r5, r7}, @cred={0x20, 0x1, 0x2, 0x0, r8, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, 0x0}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r18, 0x0, r19}, @rights={0x10, 0x1, 0x1, []}], 0x7, 0x0}, {&(0x7f0000c11000)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000349000-0x30)=[{&(0x7f0000935000-0xd8)="f10d5b8be1433de86fe17374ada0b0457106fdfbb7357ac9f1aced05d2706d6adb170efccbf48c12583927de5c99c5a4be727aa60776c8bd92e166eeb1cdd3d2d4c7f30f4322e6dbc48aaa910d313820c6de35119376368ed326045f7ebd96ad964283a043c029b897116887d8c34216388aec4b94e5bb8456211d94b0c7350da8a3005aba37224a819a86752c809b18b231d44e392375bae998d1b20779465c5e90f9cc5ed2ff44b0f9876923f20a64d42a6a0ca2a3c859c50f37f11c4547b067a0af1f22c8dc54691b4dcc083baa3b0db6345d4761aef1", 0xd8}, {&(0x7f0000025000-0x26)="3c4d31c415f84cbf81dcb7d1717813f42e3dc0af90b60b1a00dd86f28103d1e037e6f218a7d3", 0x26}, {&(0x7f00002ec000-0x5a)="2a0dfc6d486c81554c759e094d62fb8cf758496e8eee0274ec324e9f54d7d96d189e08b3ea6ce223619956ebc03a0fefb481a4d50a4e66eae2059b3ff065caacbc406971505cf8cd6c3d2b9369ec1bf028c5e50e8d045247a8f1", 0x5a}], 0x3, &(0x7f000073e000)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r1, r0]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r6, 0x0}, @cred={0x20, 0x1, 0x2, r10, r5, r4}, @rights={0x18, 0x1, 0x1, [r0]}], 0x6, 0x40}, {&(0x7f00006f4000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f000032c000)=[{&(0x7f0000d2b000-0x7e)="ac60c49ef5217f1d07e17550e1503034ab0d83929ae2fbbe3bc080fa42aa2bff7a4d4213b7b39845a895953cb3d7554c26b5bda33b597138790396c92e3020a8f8ac995daecd859b159a96117298f2294a416953584d80687cd9cd8f65d6659554fe0a4f425f26f6cd870e5ca94bec8c1634f60a9ff6ceb9c56566eb0e5a", 0x7e}, {&(0x7f000012c000)="7ad7a5252a00976c0a", 0x9}, {&(0x7f0000402000)="13d0a46335216a5971165ce4063a8aac1d944d5a71ed2e15e50393eb6881aa1bf9d085ce9b261b2dd301f49b0681a41ccd17533227", 0x35}, {&(0x7f0000fb7000-0x45)="b41500a8a2fa57eb4827936ab9cd912b83043f4876c09eef3556a596aa9d3dec1ae28dd00ac840bed0cf87e8300c331711232b469a438f80bd65b0f67caad32d4e0be1b52e", 0x45}, {&(0x7f0000fb4000)="5c7270fdc21ce98bda6fb9c4b8efe243a9af9ddec6a238d0674cab12580b037319215f6707b4c7cc848ae6654e5a4673721600f518cc0010588febc541303a60abcab2f4c11f6f053b96cb97b6c9f657ceca7765c5e7af45f3845773f78190fe7bcda7f526fbb1ffd6f9f95857a3f5e18ff4d4541b6db22ff2138f05000f1516958bf5ac53ad73b3ff75a002800dcff79f0d864a9adb41f3933edcf3c586c95f084f9db85e7fb298c15fa6bd24aab281a953df5dd14ff31f622d33f09d46b19f9597063cb527fbea60f47f8f78fd84b6285025986800856d2587d5fd64eaecf6e655a9d1aa9705df11", 0xe9}], 0x5, &(0x7f000085b000)=[@cred={0x20, 0x1, 0x2, r3, 0x0, r4}], 0x1, 0x4804}], 0x5, 0xc0) r20 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00002fc000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r20, 0x400454c8, &(0x7f0000cb2000)=0xc000000000000000) r23 = socket$netlink(0x10, 0x3, 0x2) mount(&(0x7f00004f1000)="2e2f66696c65302f66696c653100", &(0x7f0000f3b000-0xe)="2e2f66696c65302f66696c653000", &(0x7f00000d4000-0x6)="65786f667300", 0x800001, &(0x7f0000e7f000-0x7)="0ee16e4c2f127b") epoll_create(0x9) sendmsg$unix(r22, &(0x7f00001c1000-0x38)={&(0x7f00001c4000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f0000026000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [r23, r22]}], 0x1, 0x0}, 0x0) sendmsg$netlink(r23, &(0x7f0000c94000-0x38)={&(0x7f0000dd0000-0xc)={0x10, 0x0, 0x6, 0x13c4000}, 0xc, &(0x7f00003de000)=[], 0x0, &(0x7f00001bb000-0x60)=[], 0x0, 0x0}, 0x0) dup2(r22, r23) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000824000)={0x0, 0x0, 0x0}, &(0x7f0000626000-0x4)=0xc) sched_getaffinity(r24, 0x8, &(0x7f0000ed9000-0x8)=0x0) [ 87.468155] binder: 7909:7913 ERROR: BC_REGISTER_LOOPER called without request [ 87.475623] binder: 7909:7913 BC_INCREFS_DONE u0000000080000000 no match [ 87.487828] kauditd_printk_skb: 56 callbacks suppressed 2017/12/02 23:46:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00006fc000)={{0xa, 0x0, 0x8, @loopback={0x0, 0x1}, 0x6}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}, 0x2, [0x6, 0x7fff, 0x8, 0x99, 0x400, 0xfff, 0xe3, 0x1]}, 0x5c) socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000215000)=0x0) 2017/12/02 23:46:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() r0 = open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f000091a000)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r1, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 4: mmap(&(0x7f0000000000/0xea7000)=nil, 0xea7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x7fffe, 0x0) mmap(&(0x7f0000ea7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ea8000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000a22000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10) mmap(&(0x7f0000ea7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eaa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eaa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eaa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eab000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000eab000)=0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x78c) mmap(&(0x7f0000eab000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x800000010d, 0xfffffffffffffffa, &(0x7f0000a94000-0x4)="8b1301ae", 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000ea9000-0x28)={@generic="6adb7373f114286c1c1f4ec0c1c4266f", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={r3, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc) epoll_create1(0x80000) mmap(&(0x7f0000ea8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000eab000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x3, 0x84, &(0x7f0000eab000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x400000) sendto$inet(r4, &(0x7f0000001000)="e3d44259bb8504e06abb27acc1f3e934dd35733f14e60483f6a83daff3f8f5", 0x1f, 0x20008000, &(0x7f0000002000)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000eaa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000eaa000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000ea9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000ea9000)="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", 0x5ab, 0x8886, &(0x7f0000000000)={0xa, 0x2, 0xfffffffffff7ffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffc}, 0x1c) mmap(&(0x7f0000eac000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000003000-0x1)="c9", 0x1, 0x8848, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x29010, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x7, &(0x7f0000515000)=0x0, &(0x7f0000001000)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000a04000-0x4)=0x0, 0x4) 2017/12/02 23:46:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00004b9000)="2f6465762f696e7075742f6d6f7573652300", 0x4, 0x12000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000729000)={0x0, @in6={{0xa, 0x3, 0x1b85f825, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x9, 0x37, 0x0, 0x2, 0x81, 0xfffffffffffffc01, 0x8, 0x1000, 0x7fffffff, 0x2, 0x22, 0x6a93, 0x7fff, 0x6, 0x200]}, &(0x7f0000404000)=0x108) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f000056f000)={r1, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xff7, 0x545}, &(0x7f0000c88000)=0x98) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) [ 87.487835] audit: type=1326 audit(1512258403.789:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=7911 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4529d9 code=0x7ffc0000 [ 87.488919] audit: type=1326 audit(1512258403.790:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=7911 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=53 compat=0 ip=0x4529d9 code=0x7ffc0000 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bf", 0x1, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000052a000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000c9f000)={r0, r1, 0x5, 0x1, r1}, 0x14) lseek(r0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x120) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000a21000-0x4)=@int=0x8, 0x4) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) [ 87.531481] audit: type=1326 audit(1512258403.833:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=7911 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4529d9 code=0x7ffc0000 2017/12/02 23:46:43 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f0000000000)={0xffff, 0x1ff, 0x6, 0xfffffffffffffffb, 0xbc0, 0x6, 0x9, 0x2, 0xfff, 0x1}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000000)={{0x5000, 0x0, 0xd, 0x0, 0x8, 0x4, 0x7ff, 0x0, 0x80000001, 0x2, 0x2a, 0x8, 0x0}, {0x3000, 0x0, 0xf, 0xfffffffffffffff8, 0x3, 0x4, 0x57c, 0xfffffffffffffffa, 0x2, 0x7a29, 0xffffffffffffbeef, 0x5, 0x0}, {0x6000, 0x15001, 0x0, 0x1000, 0xfffffffffffffffc, 0x8, 0xeaca, 0x1, 0xff, 0x3, 0x1, 0x4, 0x0}, {0x4002, 0x0, 0xa, 0x7, 0x7, 0x400, 0x0, 0x1, 0x401, 0xfff, 0x1ff, 0x20, 0x0}, {0x5000, 0xf000, 0x1e, 0x40, 0x2, 0x8, 0x101, 0x8, 0x7ff, 0x100000001, 0x3, 0x35, 0x0}, {0x4, 0x10004, 0xf, 0x80000001, 0x5c, 0xffffffff, 0x80000000, 0x22, 0xb49, 0x0, 0x5, 0x7, 0x0}, {0x0, 0x10004, 0x9, 0x7, 0xebe, 0x80, 0x7, 0x7, 0xd6f, 0x3, 0x0, 0x100, 0x0}, {0xf7abcc785d79678d, 0xf000, 0xf, 0xe7, 0x4, 0x3f, 0x8, 0x2, 0x88d, 0x8, 0x736d, 0xffffffffffff0000, 0x0}, {0x4, 0x110000, [0x0, 0x0, 0x0]}, {0x10000, 0x2, [0x0, 0x0, 0x0]}, 0x40040004, 0x0, 0x4, 0x4100, 0x5, 0x1, 0xd000, [0x2, 0x10000, 0x31, 0x10000]}) connect$ax25(r0, &(0x7f0000000000)={0x3, {"24ec7571bbf749"}, 0x6}, 0x10) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000001000-0x4)=0x28) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001000-0x20)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r1 = getpgrp(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000001000)="6e65742f72617700") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003000-0xe8)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000-0x4)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001000)={{{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @in=@broadcast=0xffffffff, 0x1, 0x0, 0x3, 0xffffffffffff0001, 0x4, 0x20, 0x80, 0x8, r3, r4}, {0x4, 0x9, 0x2, 0x9, 0x1f, 0x9, 0x0, 0xe400000000}, {0x9, 0x6, 0x80000000, 0x103}, 0x7fffffff, 0x8000, 0x4, 0x0, 0x80, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x40a}, 0x3, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0xfff, 0x6, 0x3, 0x7, 0x4, 0xe4, 0x20}}, 0xe8) ioctl$TIOCSTI(r0, 0x5412, 0x57d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002000-0x108)={0x0, @in={{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0xc0000, 0x4, 0x7, 0xca, 0x8, 0x7483, 0x2185, 0x1cedef0f, 0x2, 0xe7, 0xfff, 0x8001, 0xd09d, 0x100, 0x6]}, &(0x7f0000002000-0x4)=0x108) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000004000-0x98)={0x0, @in={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x1}, &(0x7f0000003000)=0x98) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000002000)={r5, 0x5, 0x8, 0x1, 0x6, 0x1000, 0x2818, 0x1, {r6, @in6={{0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x80000000, 0xfffffffffffffffe, 0xa57, 0x6}}, &(0x7f0000004000-0x4)=0xb8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000005000-0x75)="75e97dcf1e7228b14931a4c9e32a777bc7e887ad3b3d218fc1bdf35ed2efbdaefaec6c9c501ac24ce7c7f7a3661df3be5f3f76700586fd2d1dac6c0284e4a1f8fd0b240d7e2ed1a5f70960c4d3a6e7b993f0ea74edd830cb24cd355162cae2ef20610268f90c93ec12d8e760ee6e1e665481be2146", 0x75) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000005000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000006000)=0x8, 0x4) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r2, r7, &(0x7f0000008000-0x8)=0x0, 0x6) 2017/12/02 23:46:43 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="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", 0x101, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 87.531498] audit: type=1326 audit(1512258403.833:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=7911 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4529d9 code=0x7ffc0000 [ 87.532826] audit: type=1326 audit(1512258403.834:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=7911 comm="syz-executor3" exe="/root/syz-executor3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x4529d9 code=0x7ffc0000 2017/12/02 23:46:44 executing program 1: r0 = open(&(0x7f0000d52000)="2e2f66696c653000", 0x30400, 0x82) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00006a2000-0x4)=0x80000001, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000d43000-0x4)=0x6, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f000048d000)={0x0, @in={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x8, 0xffffffffffffff80, 0x10000, 0x800, 0x7, 0x7fffffff, 0x7ff, 0x684, 0xf2a, 0x1000, 0x8, 0x80000001, 0x4f, 0x7, 0x1e]}, &(0x7f0000d8a000)=0x108) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000d79000)={0xffffffff, 0x480000000000, 0x820b, 0x7, 0x5, 0xef08, 0x2, 0x9ba, r4}, 0x20) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000b43000-0x13)="6d29730ffe0642a65c70f089c6c98335658ae8") [ 87.533558] audit: type=1326 audit(1512258403.835:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=7911 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4529d9 code=0xffff0000 [ 87.557243] audit: type=1326 audit(1512258403.858:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=7911 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4529d9 code=0xffff0000 2017/12/02 23:46:44 executing program 0: syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000000000)=[], 0x0, 0x0, &(0x7f0000035000)=""}) 2017/12/02 23:46:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000f42000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000a74000-0xc)="2f6465762f72666b696c6c00", 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00004f2000-0x4)=0x1ff) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000c55000-0x2)=0x8, &(0x7f00008be000)=0x2) r2 = socket(0x11, 0x4000000000080003, 0x0) r3 = epoll_create1(0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000b8a000)={0x5, {{0xa, 0x0, 0x3e86378c, @loopback={0x0, 0x1}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4, [{{0xa, 0x3, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffff800}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x80000000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x80000001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x5, @loopback={0x0, 0x1}, 0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x290) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000d4b000)={0x80000000, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0xa000, r2, &(0x7f0000a1f000-0xc)={0x30000001, 0x0}) r4 = syz_open_dev$binder(&(0x7f0000b08000-0xd)="2f6465762f62696e6465722300", 0x0, 0x3) syz_open_dev$binder(&(0x7f0000db5000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0xfffffffffffffffe}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f000000a000)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000006000-0x54)=""}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00002ae000-0x4)=@int=0x0, &(0x7f000055d000)=0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000a7c000-0x10)={0x1, &(0x7f0000b99000)=[{0x0, 0x0}]}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000ea5000-0xa0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x1000, 0x0, 0x0, 0x0}, &(0x7f0000474000-0x4)=0xa0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x109a, &(0x7f00004e2000)={@random="03f5f5e5cb77", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x8864, @ipv4={{0x21, 0x4, 0x3, 0x3ff, 0x108c, 0x1, 0x21, 0x0, 0xff, 0x0, @empty=0x0, @multicast2=0xe0000002, {[@rr={0x7, 0x7, 0x2, [@local={0xac, 0x14, 0x0, 0xaa}]}, @cipso={0x86, 0x68, 0x3, [{0x7, 0xe, "f61cd0a83404f312b0b115a8"}, {0x7, 0x8, "784ad8d7b11c"}, {0x5, 0x11, "2e4c89288b26b8e5284b0d2b589074"}, {0x7, 0xd, "08438f07131b2d9984a944"}, {0x7, 0xe, "c434d1011d633aa58aba24bd"}, {0x6, 0x2, ""}, {0x0, 0xf, "c3c1775f921dadabafd8d3c30b"}, {0x7, 0xf, "9e17990b7693c850ddde7b6d87"}]}]}}, @igmp={0x17, 0x4, 0x0, @broadcast=0xffffffff, "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"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000beb000-0x4)=0x0, &(0x7f0000e9c000)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000a44000)={&(0x7f0000146000)="2e2f66696c653000", 0x0}, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000c6000+0xd61)=r1, 0x4) 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0xfffffffffffffffe, 0x100) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x84) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000a1b000-0x1)=0x200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:44 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bf", 0x1, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:44 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000038000-0x9)="2f6465762f72746300", 0x800, 0x0) connect$ax25(r0, &(0x7f000093b000)={0x3, {"e11e9c7db0d8a4"}, 0x0}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000ecc000)={0x2, 0x78, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000528000-0x8)=0x0, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) pread64(r3, &(0x7f0000d0f000)="00000000000000000000000000000000", 0x10, 0x0) syz_open_dev$usbmon(&(0x7f00008af000)="2f6465762f7573626d6f6e2300", 0x883a, 0x4a000) getrlimit(0xd, &(0x7f000089a000-0x10)={0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000bff000-0xc)={0x1, r1, 0x1}) fanotify_mark(r4, 0x80, 0x8000000, r4, &(0x7f0000c11000)="2e2f66696c653000") ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffe, 0xfffffffffffffffc, 0x40, 0x1, 0x0, []}) recvmsg$kcm(r3, &(0x7f0000381000)={0x0, 0x0, &(0x7f0000583000-0x20)=[{&(0x7f00000f6000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f0000804000-0x4f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f}], 0x2, &(0x7f0000ac9000-0x4)="00000000", 0x4, 0x200}, 0x40000000) ioctl(r3, 0x8936, &(0x7f0000000000)="") syz_open_dev$sg(&(0x7f0000833000-0x9)="2f6465762f73672300", 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c45000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init() ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000f60000)=0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000000000)={0x8, 0x800}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00001eb000)={r0}) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000f06000)=0x0) mmap(&(0x7f0000000000/0x47000)=nil, 0x47000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000a21000-0x9)="2f6465762f73672300", 0x0) 2017/12/02 23:46:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) bind$inet6(r1, &(0x7f0000a75000-0x1c)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xd2}, 0x1c) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r7 = accept$alg(r5, 0x0, 0x0) close(r7) 2017/12/02 23:46:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) bind$unix(r1, &(0x7f0000da0000-0x8)=@abs={0x0, 0x0, 0x2}, 0x8) [ 87.748906] binder: 7909:7913 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000315000)="2f6465762f7667615f6172626974657200", 0x940, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000d33000-0x4)=0x0) 2017/12/02 23:46:44 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a", 0x81, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:44 executing program 2: pause() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000080000-0x20)={@common="67726530000000000000000000000000", @ifru_addrs={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000cb3000-0xc)={0x204, 0x81, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000b22000)="6131fef166063829506b0a1b514c363abef3d31b54b9ab19753eea2bcda54e03257d0408fa387b30e11ae4cfcb321e33890f9f017cd94a20e1f8bb3cba0faa72481744094e8c069cb535ed5f2555297b13c5f123", 0x54) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 2017/12/02 23:46:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget(0x2, 0x2, 0x1) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f00001f8000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000") syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000f79000)=0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000778000-0x11)="2f6465762f7667615f6172626974657200", 0x14000, 0x0) utimensat(r1, &(0x7f0000063000)="2e2f66696c653000", &(0x7f0000911000)={{0x77359400, 0x0}, {0x0, 0x2710}}, 0x100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:44 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001000-0x50)=[{&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdb}, {&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x90}, {&(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x62}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8f}, {&(0x7f0000002000-0x4b)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4b}], 0x5, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001000-0x18)={0xaa, 0x0, 0x0}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3) mmap(&(0x7f0000281000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000005000)={{&(0x7f0000001000/0x4000)=nil, 0x4000}, 0x1, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000281000)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f76637300", 0x8803, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000003000-0x80)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000003000)="bd864ed18744e1062bbc911574d6ef95d8f7f07cb393cd98a9969bd192e67ce701b3e2cd12f318fc81f2e91c36c91ae9244f5da0c569ae6e71215f43dedf386544d6d1154b"}, 0x10) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000005000)={&(0x7f0000000000/0x3000)=nil, 0x3000}) eventfd(0xffff) 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x4, 0x101002) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) [ 87.852101] binder: 7974:7994 unknown command 0 [ 87.862924] binder: 7997:8004 ERROR: BC_REGISTER_LOOPER called without request 2017/12/02 23:46:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00009d2000-0x8c)={0x0, @in={{0x2, 0x2, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00004e4000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00009e1000-0xc)={r5, 0x2, 0x10}, &(0x7f00008ee000)=0xc) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) prctl$void(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r8, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00002f6000)=0x9, 0x4) bind$alg(r7, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r9 = accept$alg(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000f4000-0x4)=@assoc_id=r6, &(0x7f0000aa7000)=0x4) ioctl$KDSETLED(r1, 0x4b32, 0x5) fcntl$F_SET_FILE_RW_HINT(r9, 0x40d, &(0x7f00007b1000-0x8)=0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000971000)={0x800, {{0xa, 0x0, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x143}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) close(r9) [ 87.862938] binder: 7997:8004 BC_INCREFS_DONE u0000000080000000 no match [ 87.862952] binder: 7997:8004 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.879774] binder: 7997:8004 ERROR: BC_REGISTER_LOOPER called without request [ 87.879788] binder: 7997:8004 BC_INCREFS_DONE u0000000080000000 no match [ 87.879795] binder: 7997:8004 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.933463] binder: 8013:8020 ERROR: BC_REGISTER_LOOPER called without request [ 87.933476] binder: 8013:8020 BC_INCREFS_DONE u0000000080000000 no match [ 87.933483] binder: 8013:8020 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.941607] binder: 8013:8024 ERROR: BC_REGISTER_LOOPER called without request 2017/12/02 23:46:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000921000-0xc)={0x2, [0x0, 0x0]}, &(0x7f0000912000)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000378000-0x8)=@assoc_value={0x0, 0x9}, &(0x7f000076b000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f000030a000)={r3, 0x3ff, 0x2, 0x10000, 0x8000, 0x80, 0x5, 0x40, {r4, @in6={{0xa, 0x1, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x72c, 0xffff, 0x1, 0x81cc, 0x2800000000000000}}, &(0x7f0000bf6000-0x4)=0xb8) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:44 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa601a", 0xc1, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000edd000-0xd)="617474722f63757272656e7400") ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f000056f000)={0x4, 0x0, 0x21ba}) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1d, &(0x7f0000e65000)=0x0, &(0x7f0000380000-0x4)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) 2017/12/02 23:46:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000900000/0x4000)=nil, 0x4000) iopl(0x200000000000008) socketpair$inet(0x2, 0x800, 0x400, &(0x7f000077d000-0x8)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000e50000-0x4)=0x0) r1 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x1, 0x200000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, r1, 0x0) r2 = gettid() r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000cc0000-0x8)="2e2f66696c653000", 0x0, 0x100) r5 = open(&(0x7f00008db000)="2e2f66696c653000", 0x0, 0x120) r6 = gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00007c4000)=0x0) mmap(&(0x7f0000daa000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, r3, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$intptr(0x0, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000074000-0x30)="8fd5cd3743b0d8e1df0415d05b20536a5964ab8c33da058711c515f53d558d8abdd8309617735e8628faafbac0fa4a81", 0x30) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1, 0x5}, &(0x7f0000001000-0x4)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000002000-0x8)={r8, 0x80000000000000}, 0x8) getsockopt$inet6_tcp_buf(r7, 0x6, 0x400000000022, &(0x7f0000643000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000000000)=0x1000) mmap(&(0x7f00002b6000/0x1000)=nil, 0x1000, 0x8, 0x35, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r9 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000808000)="2e2f66696c653000", 0x109) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000bea000)={0x0, 0x0}) inotify_rm_watch(r4, r9) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000ffd000)={0x20000000000007d, 0x225, 0x401, 0xc007}, 0x8) open(&(0x7f000089f000-0x8)="2e2f66696c653000", 0x40001, 0x4) 2017/12/02 23:46:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000d2000)={0x6, r0, 0x0}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000e5a000-0x100)={0x0, 0xf8, "a072910825bbaf6836a19487c736eba31e329730e915410e51f93a4a85ce2a46411f94274aff75af17220a62d20309d51b265f68bed0ab202f3984612ca4512ef4db6af321f5fe20d490e65114cb91aa4c592290319656f56c95073e8502ed7d5eb6b47bbc9b0d47709d305a0a9e421b40476af9184b849c99e813d5132428dae3d0507586d03302163ccc4b2ce91b7cc8629ffb93af7dc031eba4d54da09abe5680e94a28a59710a012c2ba3117a61f175d7ffd3cd70176208552fd7b4d7b73260aeb373344cedec4d3678a106e70e430a2eb859cb6959c8636326ff1416bcf12896156bfee2808a35cc10543a2f73833d973af1296da2f"}, &(0x7f00000cf000-0x4)=0x100) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000039f000)={r2, 0xb533, 0x8000, 0xcc}, &(0x7f00007a3000-0x4)=0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) [ 87.941622] binder: 8013:8024 BC_INCREFS_DONE u0000000080000000 no match [ 87.941629] binder: 8013:8024 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 87.943718] binder: BINDER_SET_CONTEXT_MGR already set [ 87.943727] binder: 7974:8021 ioctl 40046207 0 returned -16 [ 87.945679] binder: 7974:8021 unknown command 0 [ 87.945687] binder: 7974:8021 ioctl c0306201 2000a000 returned -22 [ 88.050971] binder: 7974:7994 ioctl c0306201 2000a000 returned -22 2017/12/02 23:46:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00003e4000-0x4)=0x0) sync_file_range(r0, 0x8, 0x5, 0x1) 2017/12/02 23:46:44 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a", 0x81, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 88.092243] binder: 8038:8048 ERROR: BC_REGISTER_LOOPER called without request [ 88.100888] binder: 8038:8048 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000003f000)={0x2, 0x78, 0xe2, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000040fe, 0x0, 0x2000000, 0x0, 0x0, 0x4, 0x43d77b39c0c01e97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000002, 0x0, 0x0, 0x0}, 0x0, 0xc32, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00005d9000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00006a9000)="2f6465762f6c6f6f702d636f6e74726f6c00") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f00000b3000)="2f6465762f6c6f6f702300", 0x0, 0x80000000000000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000f8b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") syz_open_dev$evdev(&(0x7f0000788000)="2f6465762f696e7075742f6576656e742300", 0x400, 0x2) clock_gettime(0x0, &(0x7f0000664000-0x10)={0x0, 0x0}) select(0x40, &(0x7f0000dd8000-0x40)={0x586b, 0x7, 0x7f, 0x1, 0x7, 0x3, 0x0, 0x309}, &(0x7f0000742000)={0x7, 0x0, 0x100000001, 0x1f, 0x0, 0x5, 0x3ff, 0x2f1f}, &(0x7f0000dbc000-0x40)={0xfb49, 0x9a, 0x1, 0x60, 0x2, 0x800, 0xfffffffeffffffff, 0xcd89}, &(0x7f0000660000+0x6d)={r4, r5/1000+30000}) recvmmsg(r2, &(0x7f00009fd000)=[], 0x0, 0x0, &(0x7f00005a3000)={r6, 0x989680}) socket$alg(0x26, 0x5, 0x0) setns(r2, 0x8000000) 2017/12/02 23:46:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000aa1000)="2f6465762f70746d7800", 0x882001, 0x0) write(r0, &(0x7f000030b000-0x62)="2f7f4be2b36c5526a5534195cbffffffffffff0917fff1ed8f549f1b496490f3f2afa9fd016f97ea68e0ff360fd55801f986ce867fff0900000000000000000000097f39147a2c89311b32b0f6687ef5f00d0558fc81901464d8ff1dbf13", 0x5e) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000aae000)="2e2f66696c653000") pipe(&(0x7f0000bd1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000928000)="04", 0x5) open(&(0x7f000053a000-0x3)="2e2f66696c653000", 0xfffffffffffffffe, 0x82) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x37d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000b2f000)="2d2400", 0x0) dup(0xffffffffffffffff) getpid() r2 = open(&(0x7f000000d000-0x8)="2e2f66696c653000", 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) unlink(&(0x7f00001b5000)="2e2f66696c653000") socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f000092e000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0xfffffffffffffffc, &(0x7f000069d000-0x8)={0x0}, 0x0, 0x8) sysfs$3(0x3) prctl$void(0x22) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000087000+0xeb0)=0xb6e7, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00007bf000)="2f6465762f73657175656e6365723200", 0x400, 0x0) mincore(&(0x7f0000145000/0xc00000)=nil, 0xc00000, &(0x7f0000fbe000)="") add_key(&(0x7f0000980000-0x6)="6c6f676f6e00", &(0x7f0000fbe000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000fbf000-0x10)="9bf86fe53963b3df5f213c83dbfbc50e", 0x10, 0xfffffffffffffffc) syz_open_dev$sg(&(0x7f0000fbf000)="2f6465762f73672300", 0x2, 0xfffffffffffffffc) r3 = dup(r0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000edf000)={0x9, &(0x7f0000de7000-0x48)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000f11000)={r4, 0x1}) ioctl$TCSETA(r3, 0x5402, &(0x7f00006ef000-0x14)={0x10000000, 0x0, 0xfffffffffffffffb, 0x100000000000009, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0}) [ 88.146645] binder: 8038:8048 unknown command 0 [ 88.153278] binder: 8038:8048 ioctl c0306201 20004000 returned -22 2017/12/02 23:46:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000d89000-0x4)=0x0) r6 = accept$alg(r4, 0x0, 0x0) close(r6) 2017/12/02 23:46:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00009e0000-0x8)={0x0, 0x0}) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f00006e6000-0xc)={0x0, 0x0, 0x0}, 0xc) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x10002000010000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) eventfd2(0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xfffffffffffffffd, 0x0}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket(0xa, 0x2, 0x0) connect$inet(r3, &(0x7f00003ec000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmsg$netlink(r3, &(0x7f0000056000)={&(0x7f000001e000)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000056000)=[{&(0x7f000002d000)=[], 0x0}, {&(0x7f0000a45000)=[], 0x0}, {&(0x7f0000356000-0x11)=[{0x11, 0x0, 0x0, 0x0, 0x1, "85"}], 0x11}], 0x3, 0x0, 0x0, 0x0}, 0x7ffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00001df000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffffff, &(0x7f00007f6000-0x8)="2e2f66696c653000", 0x0, 0x5) r6 = syz_open_dev$sndseq(&(0x7f000063a000-0xd)="2f6465762f736e642f73657100", 0x0, 0x0) r7 = request_key(&(0x7f00009e1000)="6365706800", &(0x7f00005f9000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00003e4000)="2f6465762f736e642f73657100", 0xfffffffffffffffd) keyctl$set_timeout(0xf, r7, 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000947000)={{0x100000008000080, 0xff000000004}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc6, 0x80000000080003, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20006, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000c03000)={{0x80, 0x0}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x77, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009fe000)="2f6465762f73657175656e6365723200", 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00009fc000)={{0xa, 0x2, 0x7ff, @loopback={0x0, 0x1}, 0x10001}, {0xa, 0x1, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffff}, 0x80000000, [0x4d, 0x0, 0xbc2d, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x4f60, 0x0]}, 0x5c) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000715000-0x4)=0x4b9d) getpeername$inet(r8, &(0x7f0000cc2000)={0x0, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000315000)=0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000a2a000-0x16)={0x9, [0x2, 0x2, 0x100000000, 0x45e, 0x9, 0x4, 0xf6, 0x6, 0x0]}, &(0x7f00004de000)=0x16) ioctl$TCFLSH(r8, 0x540b, 0x7) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x0, 0x8007, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x101, 0x0, 0x3, 0x0}, 0x0, 0xfffffffd, r8, 0x0) perf_event_open(&(0x7f00005dd000-0x78)={0x0, 0x78, 0xd4e9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000d88000)="2f6465762f73657175656e63657200", 0x20006, 0x0) dup3(r4, r6, 0x0) write$sndseq(r9, &(0x7f000005b000-0x1b0)=[{0x4, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x6}, {0x20, 0x0}, @addr={0x0, 0x0}}, {0x81, 0x2, 0x0, 0x4, @time={0x0, 0x0}, {0x5, 0x0}, {0x53, 0x0}, @raw8={"b1cb87152790e915a4ab446e"}}, {0x1, 0xc2, 0x2, 0xfff, @time={0x0, 0x0}, {0x9, 0x7d}, {0xd3a, 0x0}, @raw8={"a2b518dc49a184c18b4c451b"}}, {0x8, 0x0, 0x9, 0xbf4c, @tick=0x5, {0x40, 0xfffffffffffffffd}, {0x19, 0x2}, @result={0x1, 0x6bc}}], 0xc0) 2017/12/02 23:46:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f0000bf4000)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0xdc1c64cbb93796c8, 0x0, 0x0, 0x18, 0x8, &(0x7f000017f000-0x18)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000ed5000)=[0x78]}, 0x1000000000007}}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a43000)="2f6465762f73657175656e6365723200", 0x4000, 0x0) 2017/12/02 23:46:44 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02a", 0xa1, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00007f7000-0xf)="2f6465762f73657175656e63657200", 0x210002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000b48000)={@common="62637366300000000000000000000000", @ifru_flags=0x5000}) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000440000-0x4)=0x8, 0x4) r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) inotify_init() ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) 2017/12/02 23:46:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f000050a000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f00000e7000-0x4)=0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00009ea000)=0x0, &(0x7f0000212000)=0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00005e2000-0xc)={0x7, r0, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000d6f000)={0x0, 0x10001, 0x10001, &(0x7f000001d000)=0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f000094d000)=@assoc_value={0x0, 0xff}, &(0x7f0000837000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000c8e000)={r4, 0x3f}, &(0x7f0000c95000)=0x8) ioctl$TIOCGSID(r2, 0x540f, &(0x7f0000e12000-0x4)=0x0) r5 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:44 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x3, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x405}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000496000)={r1, @in6={{0xa, 0x1, 0x7f, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9cd}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4000000000000, 0x2}, &(0x7f0000001000)=0x98) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000001, 0x3a) mmap(&(0x7f0000fd0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000fd0000)={&(0x7f0000fd1000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000070f000-0x10)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000fd0000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000a30000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x2, 0x1010, 0xffffffffffffffff, 0x800000) r3 = socket(0x6, 0x80006, 0x6) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x3a, 0x1, &(0x7f0000fd2000)="", &(0x7f000036b000-0x4)=0x0) mmap(&(0x7f0000fd0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000fd2000)=0xc, 0x4) mmap(&(0x7f0000fd0000/0x1000)=nil, 0x1000, 0x800000000003, 0x32, r2, 0x20000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000b47000-0xb)="2f6465762f6c6f6f702300", 0x880009, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f000038c000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0]}) fstatfs(r4, &(0x7f000089e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") io_setup(0x3ff, &(0x7f0000dd9000)=0x0) io_getevents(r5, 0x6, 0x2, &(0x7f0000486000)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f0000f58000)={0x0, 0x0}) mmap(&(0x7f0000fd0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(0xffffffffffffffff, &(0x7f0000368000)=[{&(0x7f0000ae6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfc}, {&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x4, 0x45) 2017/12/02 23:46:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x78, 0xe2, 0x0, 0x0, 0xffffffffffff1238, 0x0, 0x0, 0x0, 0x0, 0x8000004102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f000010c000)="2f6465762f6c6f6f702300", 0x0, 0x24002) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000caa000)=0x1, 0x4) mmap$binder(&(0x7f0000bbb000/0x4000)=nil, 0x4000, 0x2000011, 0x10010, r1, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000ec9000)={0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ec9000-0x5c)={{0xa, 0x2, 0xffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9}, {0xa, 0x3, 0x40, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffffffffffffa3e4}, 0x0, [0x0, 0x1, 0x9, 0x101, 0x10001, 0x8001, 0x4509, 0x4]}, 0x5c) bind$bt_hci(r1, &(0x7f0000038000)={0x1f, 0x1, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000885000)={0x200, {{0x2, 0x1, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) 2017/12/02 23:46:44 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa0", 0xb1, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 88.505658] binder: 8081:8090 got reply transaction with no transaction stack 2017/12/02 23:46:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f000046d000)={0x0, 0x10000}, &(0x7f00002ed000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000b7f000)={0xff, 0x0, 0x6, 0x2, 0x0}, &(0x7f0000f6c000)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00006a1000)={r3, 0x9, 0x1, 0x1000, 0x9a, 0x7, 0x4, 0xd5, {r4, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x3, 0x100000000, 0x200, 0x5}}, &(0x7f0000cc6000-0x4)=0xb8) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00008f7000-0xbb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbb}, {&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x3, 0x45) 2017/12/02 23:46:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000f1b000)=0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00007de000)={0x0, 0x0}) r2 = timerfd_create(0x6, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f00001c0000)="2e2f66696c653000", 0x400000, 0x77) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000c2a000)="2f6465762f73657175656e63657200", 0x1, 0x0) fchmod(r4, 0x5) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000ac000-0xc)={r3, r4, 0x1ff}) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r7, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r10, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r9, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r8, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r5, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r7, 0x0, r7, 0x0, 0x5ad, 0x6) r11 = accept$alg(r9, 0x0, 0x0) close(r11) [ 88.557986] binder: 8081:8090 transaction failed 29201/-71, size 24-8 line 2747 [ 88.565773] binder: 8081:8101 got reply transaction with no transaction stack 2017/12/02 23:46:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:44 executing program 3: mmap(&(0x7f0000000000/0xa64000)=nil, 0xa64000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000a64000)=0x0) getpgrp(r0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r0, 0x20, &(0x7f00008c9000)={0x22, 0x20000003, 0xb07a, 0x8000000000000002}) fcntl$dupfd(0xffffffffffffffff, 0x404, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00008cd000-0x9)="2f6465762f6b766d00", 0x3ffffd, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000190000-0xb)="2f6465762f766373612300", 0x0, 0x7fc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2082f, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2801, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000b83000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000365000-0x4)=0x14) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) gettid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcd000)="2f6465762f6b766d00", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000bb6000)={0x3, 0x10001, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400000000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x40000071, 0x0, 0x0}]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x1b000)=nil, 0x1b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone(0x2000800000b, &(0x7f0000a58000-0x4)="19fa6f34", &(0x7f00002a8000-0x4)=0x0, &(0x7f00008be000)=0x0, &(0x7f0000e82000)="") perf_event_open(&(0x7f000000a000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000003, 0x20001010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000f44000)=0x228000, 0x4) rt_sigtimedwait(&(0x7f0000002000-0x8)={0x3ffff}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000fbd000-0x10)={0xffffd, 0x989680}, 0x8) io_setup(0xe930, &(0x7f0000fc5000)=0x0) 2017/12/02 23:46:44 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfde000)=nil, 0xfde000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000ae000-0x98)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000000008, 0x40000000003b}, &(0x7f0000135000-0x4)=0x98) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f24000)={0x0, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2}, &(0x7f0000fde000)=0x98) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000fdf000-0x8)={r1, 0x20}, &(0x7f0000cf2000)=0x8) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000a02000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000fdf000-0x5)=@ethtool_sset_info={0x37, 0x5, 0x3, [0x3, 0x7dd, 0xfffffffffbfff581, 0x1000, 0x8]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$inet6(0xa, 0x803, 0x3) connect$inet6(r2, &(0x7f00009e7000-0x1c)={0xa, 0x3, 0xfffffffffffffffe, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) write(r2, &(0x7f0000bde000)="1c000000000000001c18c0", 0xb) syz_emit_ethernet(0x33f, &(0x7f0000015000)={@random="ff01395447d8", @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, "1db4ba", 0x309, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[@fragment={0x3b, 0x59, 0x5, 0x2, 0x5, 0x0, 0x0}, @dstopts={0x3b, 0x57, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xcd, 0xc9, "1b1fa86d0c7efb56c477b45e2c919f1a78394810e1233579baaecff8915d00825bd3188fbfaef1e8785eb2bcdff260ad0fbb925d45bd0d3248e3e0fa5972c5f931f2944d0ccd8cc2f3ffefab2408b350d6dd689735a0b5e4264a4287996143dae3a8de84dec151e026eaaa495dc1468688ae020a8afb3b5c463b20c28a5b7f08a28c18582bebf878c067a1ea6f4880594413e3c9f8e3413d4163e4190207d62e06e5d7dfb71564383826cd9de885d59572d68461d39a9eb6aa6ddded88861a82240681614fe82bb1bb"}, {0xc2, 0x8a, "16732658c8b09c86cef521d8d7fa454c0f626421b755753b9ce5957a2699eb9da14b4f9b7d4ec350af6281082546fe7f7ad8e11f388a67f5a2f45916fd96d9917644802a6fd91610d4d48133f4c33c342bd0390a5a7c8f0e3e241088d06783e9566f3c505fbabc77a94bbe62a0fb4c8eb48c946da7fa7bfa77336e8ac2f8a12e4d34f7cca1d81ce16209"}, {0xff, 0x2c, "7ce13f679166b950edbe86cf625a96938143f89f8522a933bb3d8ac3d01c90407b407c1504f77330235be9ba"}, {0xff, 0x0, ""}, {0xc3, 0xbc, "fbccd2539e563641e6afd67a74cb263a19f6fd873e945081c35b2d2cee9ad7cb316c68de69fcd390a6d64a4178538e36221916b2c1d302058716442f08b77c21eb1452b0e1a02e3d65ba1a0435780661ea1179bc3c26a6228e12085a28212d0da6e0b79ff9a3606b9c38f73bfbde1da31c282c68ce815f4b3712759dd3f8a74fbf4ac59c37a368bbfa2f72f955771e9a84dc762570227321332593a38456650ae91c830d10e135b11988c866302deea00236e57526c02bc642e247b4"}, {0x5, 0x73, "f768549f3aad5618382781d8ae077199040d42758cc3639d0a20681fe54fe3cfe4b669ab1002a7906e9b08e5771c7d237d2b4bd3d9853a22364057101db45c7fdaa153f177f93593ef10c8aba6f1db07ef2d13a97de4763058f1717da18f5ecb1878f95f473aef7ecfc1c2757aca2a25f08581"}]}], @dccp={{0x1, 0x1, 0x4, 0x1, 0x80, 0x0, 0x0, 0x2, 0x6, "302781", 0x6, "3ae441"}, "b3fd4572b96a45041480926b2c8cf96dca1dbf615a53da43c83c748e1637effd0c92d9b2898b8009b1b38351a665cc"}}}}}}, 0x0) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fde000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000fe0000)={0x42424242, 0x42424242}, 0xe98, 0xa65) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000949000-0x8)={0x42424242, 0x42424242}, 0xfffffffd, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000725000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f000051a000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fdf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/02 23:46:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) [ 88.565782] binder: 8081:8101 transaction failed 29201/-71, size 24-8 line 2747 2017/12/02 23:46:44 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d023", 0xb9, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:44 executing program 0: r0 = socket(0x1, 0x80000, 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001000-0x1a4)=[{{&(0x7f0000001000-0x10)=@in={0x0, 0x0, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000ee0000-0x10)=[{&(0x7f0000000000)="00000000", 0x4}], 0x1, 0x0, 0x0, 0x7ff}, 0x8}, {{&(0x7f0000000000)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x80, &(0x7f0000001000-0x10)=[{&(0x7f0000000000)="00000000000000000000000000000000000000000000", 0x16}], 0x1, &(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2d, 0x7}, 0x80000000}, {{&(0x7f0000000000)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000001000-0x40)=[{&(0x7f0000001000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f00003f2000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7a}, {&(0x7f00001f5000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x4, 0x0, 0x0, 0x80}, 0x9f}, {{&(0x7f0000eb1000)=@alg={0x0, "0000000000000000000000000000", 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58, &(0x7f0000000000)=[{&(0x7f0000001000-0xb)="0000000000000000000000", 0xb}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x2, &(0x7f0000001000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa2, 0x4}, 0x2}, {{0x0, 0x0, &(0x7f0000d4b000-0x40)=[{&(0x7f000057e000-0x6c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6c}, {&(0x7f0000f21000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x94}, {&(0x7f0000001000-0x5f)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5f}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x4, &(0x7f0000001000-0xc2)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc2, 0x8}, 0x0}, {{0x0, 0x0, &(0x7f0000000000)=[], 0x0, &(0x7f0000001000-0x47)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x47, 0x62}, 0x7f}, {{&(0x7f0000b28000)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000f9f000-0x80)=[{&(0x7f0000f5f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x34}, {&(0x7f0000b67000-0x8b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8b}, {&(0x7f0000001000-0x9f)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9f}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc1}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa4}, {&(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x64}, {&(0x7f0000be9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f}], 0x8, &(0x7f0000e89000-0xc8)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8, 0x7}, 0x3}], 0x7, 0x20, &(0x7f0000911000-0x10)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000912000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x64, 0x0, &(0x7f000070b000)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000df8000-0x20)=[@fda={0x66646185, 0x3, 0x3, 0x2a}], &(0x7f0000fc6000)=[0x38]}, 0x1f}}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f000072b000)="2f6465762f76637300", 0x0, 0x0) getsockopt$SO_PEERCRED(r3, 0x1, 0x11, &(0x7f00004c4000-0xc)={0x0, 0x0, 0x0}, 0xc) fstat(r1, &(0x7f0000619000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00006cf000)="2e2f66696c653000", &(0x7f0000351000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d63000-0xc)={0x0, 0x0, 0x0}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000297000-0x4a)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000019e000-0x4)=0xe8) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00008eb000-0xc)={0x0, 0x0, 0x0}, 0xc) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000d51000)={&(0x7f000064e000/0x3000)=nil, 0x3000}) sendmsg$netlink(r3, &(0x7f000018a000+0x1b1)={&(0x7f0000895000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000aef000-0x10)=[{&(0x7f0000f37000)=[{0xe1, 0x8, 0x1, 0x73, 0x1, "0e3fd9c62e80a0cd6681c387d22b5877d7f9e2d6f709344311468c43199a14c27ce10c071a90d800fbc52bb8b8c3a7da700c7c88b6c31988fcfab9d27c9eaac1acc7b3d7f3cf62d40978bb633405e48854ff49fe554d5b5d0675ba5494e6c63d2d395abdd25462c2727d64ea1ed59dc5251c26336cbce03d7151e409023011d9b89ef941b044c19671cf89f8566ad46e7dc83cfae4d425734ece1707d5a92929ded4fe6aa8845a4d0c55e59001ebaac11606a96ed68b6803fe2da8e9d04001190c03efdc39eb9051c5a6949cba41bb400c"}, {0x2a, 0x40, 0x0, 0x62, 0x9, "bf8f4ca847805649e012192df39c62cd64c21518b508af1a7cea"}], 0x10b}], 0x1, &(0x7f0000841000)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x90, 0x40000}, 0x20000044) readlink(&(0x7f0000134000)="2e2f66696c653000", &(0x7f0000d17000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x76) ptrace$poke(0x5, r7, &(0x7f0000711000-0x8)=0x0, 0xffffffff80000000) 2017/12/02 23:46:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000eb7000)="6e65742f69676d703600") ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000b4000)=0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000bb0000-0x10)=@ipx={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000d68000)=0x10, 0x80800) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000670000)=0x0, &(0x7f00006c6000-0x4)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) fcntl$notify(r0, 0x402, 0x8) [ 88.669512] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.676253] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 23:46:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x7, 0x7, 0x88ab, &(0x7f0000b18000)={0x0, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000b12000-0x8)=0x100000000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) ioctl$VT_WAITACTIVE(r3, 0x5607) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) open_by_handle_at(r3, &(0x7f00004fd000)={0x80, 0x0, "a4955bcf972618f099e57c534518ccea7b53910768a506b5d3e706bf18a54d5ac09774e66a5849fe5ac7bde3d148fc11c6df34c9051bccfdf330a5f248c08e85549235461f4dfd1aba0181e849e2b9094cc85419a48cd8c60a3350c4933f45adfdba839ee942c50373f1a54733d340b02ab1f024a3ba4b05"}, 0x82) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r1, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r7 = accept$alg(r5, 0x0, 0x0) close(r7) accept$ax25(r1, 0x0, &(0x7f00005b7000-0x4)=0x0) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x1, 0x45) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d934", 0xbd, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000784000-0xd)="2f6465762f7573626d6f6e2300", 0xdf11, 0x200000) faccessat(r0, &(0x7f000000e000)="2e2f66696c653000", 0x80, 0x800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000200000)={0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000bc8000)="2f6465762f6175746f667300", 0xc0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000def000)={0x7, 0x0, 0x10003, 0x9}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000aee000-0x10)={0x35, r4}) getsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000a35000)=0x0, &(0x7f00008bb000)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r5 = syz_open_dev$loop(&(0x7f00001f8000)="2f6465762f6c6f6f702300", 0xfffffffffffffffd, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) syz_open_dev$urandom(&(0x7f00004c1000-0xd)="2f6465762f7572616e646f6d00", 0x0, 0x13d401) [ 88.730622] binder: 8135:8139 ERROR: BC_REGISTER_LOOPER called without request [ 88.738171] binder: 8135:8139 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000370000)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000091000)=0x0) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000fab000)="6e65742f7261365f73746b8000f5") nanosleep(&(0x7f0000cbc000)={0x0, 0x1c9c380}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f0000dc1000-0x10)={0x0, 0x989680}) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000bb0000-0x10)=@ipx={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000d68000)=0x10, 0x80800) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000670000)=0x0, &(0x7f00006c6000-0x4)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) fcntl$notify(r0, 0x402, 0x8) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="", 0x0}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) [ 88.792477] binder: 8135:8139 got transaction to invalid handle [ 88.792487] binder: 8135:8139 transaction failed 29201/-22, size 32-8 line 2832 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x44}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 2: r0 = open(&(0x7f00002d4000)="2e2f66696c653000", 0x8003, 0x18) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f000071c000-0x38)={0x101, 0x2b2, &(0x7f00007c2000)="08ef823d13456ad46aefc8a04e83", &(0x7f0000001000-0xca)="7c168c8a7817d086a3e88376128d692e87af44cbe44434e592b3a342c1a7aaef9c26e259e5ecb7e859b602bf915261bf712e47e8f3a30a98802c556143dfc416edac2e67925405f271901a9e9b59736e19dc6a4116808d8d7403291faea5485a6ba522b28dae91d77f8d4d03af59a06571bae59efe957de5cab0adc8200828532b1e9e6fa118009e09fdb5d3facfba1143cc3014176791c8877a297d38534e8f32113e6b661d1e228adfa2311c69adeb5123a53e7bae6762f7faebb6125bd32493c2dc4cd84a1f7ae07c", 0xe, 0xca, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 88.842820] binder: 8135:8139 ERROR: BC_REGISTER_LOOPER called without request [ 88.842879] binder: 8135:8139 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa", 0xbf, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00005e3000-0x4)=0x0) r1 = perf_event_open(&(0x7f000093e000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100, 0x1000000000000000, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r1, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r7 = accept$alg(r5, 0x0, 0x0) close(r7) 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x3, 0x34, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000f61000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f62000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00005a3000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00007bf000)=[{r1, 0x2201, 0x0}], 0x1, &(0x7f00002c2000-0x10)={0x77359400, 0x0}, &(0x7f0000212000)={0x7}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7a78a04a646", 0x1b}], 0x1, &(0x7f0000335000-0xd8)=[@cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}], 0x4, 0x40000}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000005000)="2f6465762f73672300", 0x0, 0x2202) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x80da12, 0x9, 0x20000000, 0x80000000000000}) chdir(&(0x7f0000b03000-0x8)="2e2f66696c653000") socket(0x15, 0x100000000880000, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000000b000-0x9)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x20080, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00007cc000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00006eb000-0x5)="7573657200", &(0x7f000076c000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000cd6000)="14", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000f39000-0xc)={r3, r3, r3}, &(0x7f0000f79000)="", 0x0, &(0x7f0000cba000-0x26)={&(0x7f0000107000)={"726d643132382d67656e65726963"}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) uname(&(0x7f000097e000-0xc1)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") membarrier(0x10, 0x0) clone(0x2c000000, &(0x7f0000324000-0xc2)="b10e2a4fd06c4ee912477e3ba738eb341c142cc1a830bba0b91e620ced0edeb0367b745a719305417d94334f0411b47c259f9804ed500787bbfd301413058cf6376001177e77a935f5fc33c3a726a373c079304292d25d1d99e91270fb2a05ba7992a68eecb86c8e21c4b6f9b52f3d2c5738c52d22a8426f12ec694dabe07f63f4cc82297038bb4ad89b16f098c9d6c062a4d08dda2233b1c1f3fc5d8e3cf42884c7de903f207180468e28459ecbac765a3c8ea485976504d2a8e0acd165aaa7226e", &(0x7f0000f29000)=0x0, &(0x7f0000a92000-0x4)=0x0, &(0x7f00007b9000-0x86)="cde369a3695588dca6bcdd3d8a4e81c41a2a9502c0702bde028bf96495a6f58dae4146bca97498a7c5725021708491f71a697501a41dcb88ccf77229887260b0923da4a6518f50c16459382f0cfbb58bd48b7b1872181e929e82503391945a8a04ebaccbe2f901282b0b8acb4d29bbae7bc7e9157f14a598ceaa2c58b8d1e74bf481ebd0e988") membarrier(0x8, 0x0) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="00", 0x1}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x5, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000b8000)={0x6, 0x8}) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xe2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r1, 0x1) tee(r0, r1, 0x9, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40000000000, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x20000000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000004000-0xc)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f000000f000-0xc)={0x40200000, 0x0}) epoll_wait(0xffffffffffffffff, &(0x7f0000f69000)=[{0x0, 0x0}], 0x1, 0x1) fcntl$addseals(r2, 0x409, 0x4) mmap(&(0x7f0000000000/0xfb1000)=nil, 0xfb1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000794000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) memfd_create(&(0x7f0000cbb000)="6367726f757016707070316b657972696e672800", 0x1) r5 = syz_open_dev$vcsn(&(0x7f0000bff000-0xa)="2f6465762f7663732300", 0x101, 0x40) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f00006b9000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r6 = userfaultfd(0x0) pwrite64(r6, &(0x7f0000533000-0x19)="2f2bb5a2382a2a4ab4db1b014d81b72b61e06f955c38641f13", 0x19, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_COPY(r6, 0x8010aa02, &(0x7f00006a3000)={&(0x7f0000a0f000/0x4000)=nil, 0x4000}) mmap(&(0x7f000031d000/0x5000)=nil, 0x5000, 0x1, 0x40013, r2, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r7 = gettid() syz_open_dev$evdev(&(0x7f0000013000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000b28000)={0x800, 0x1000}) tkill(r7, 0x7) prctl$getname(0x10, &(0x7f0000bf8000)="0000000000000000000000000000000000000000000000000000") 2017/12/02 23:46:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c63000-0xc)="2f6465762f72666b696c6c00", 0x200800, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000403000-0x8)=0x1) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000b57000-0x95)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000edd000)="2e2f66696c653000", &(0x7f0000646000)="2e2f66696c653000") syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) [ 88.842916] binder: 8135:8139 got transaction to invalid handle [ 88.842926] binder: 8135:8139 transaction failed 29201/-22, size 32-8 line 2832 [ 88.931886] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.938328] binder: undelivered TRANSACTION_ERROR: 29201 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000000000000000", 0x23}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) [ 88.977465] binder: 8190:8198 ERROR: BC_REGISTER_LOOPER called without request [ 88.984944] binder: 8190:8198 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f000016d000-0x4)={r1}) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000879000-0x18)={0x0, 0x8, 0x30, 0xc8b, 0x2}, &(0x7f0000100000)=0x18) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f000089d000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00006ce000)=0xb) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000791000-0x6)={r3, 0xff}, &(0x7f0000cb4000-0x4)=0x6) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000615000)=0x0) fcntl$lock(r2, 0x5, &(0x7f0000055000-0x20)={0x2, 0x2, 0x4, 0x7, r5}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f000052c000)={0xfffffffffffffff7, 0x0, 0x8000, 0xfffffffffffffffc, 0x7, 0x100000000, 0x1d, 0x44c3, r4}, &(0x7f00004ac000)=0x20) ioctl$TCSETA(r1, 0x5402, &(0x7f00005af000)={0x752, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x30d7, 0x1031, 0x800, 0x7, 0x0}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000981000-0x90)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000", 0x2}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f000048f000)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r3, 0x0, 0x0) close(r6) [ 89.029519] binder: 8190:8198 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="00000000000000000000000000000000000000", 0x13}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000e26000)=[{{&(0x7f0000b92000)=@ax25={0x0, {"00000000000000"}, 0x0}, 0x10, &(0x7f0000281000)=[{&(0x7f0000e07000-0x81)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x81}, {&(0x7f00002ab000)="", 0x0}, {&(0x7f0000627000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd5}, {&(0x7f00007f7000-0x5b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5b}], 0x4, &(0x7f00006e2000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3d, 0x100}, 0x3}, {{&(0x7f000032e000)=@ax25={0x0, {"00000000000000"}, 0x0}, 0x10, &(0x7f0000150000)=[{&(0x7f0000f8b000-0x30)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x30}, {&(0x7f0000ed4000-0x8f)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8f}, {&(0x7f000053e000)="00000000000000000000000000000000000000000000000000000000000000", 0x1f}, {&(0x7f000060a000-0xaf)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xaf}], 0x4, &(0x7f000008d000-0x577)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x6}, 0xc2}, {{&(0x7f000083c000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, 0x10, &(0x7f00004ba000-0x90)=[{&(0x7f0000e45000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f00006e6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe4}, {&(0x7f0000b7f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb2}, {&(0x7f0000bf2000-0xe5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}, {&(0x7f0000708000-0xfd)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfd}, {&(0x7f00004f7000-0xf8)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf8}, {&(0x7f0000b43000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4}, {&(0x7f0000280000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000437000)="00000000000000000000000000000000000000000000", 0x16}], 0x9, &(0x7f0000998000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5e, 0x1}, 0x7}, {{&(0x7f0000b81000)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000836000-0x40)=[{&(0x7f00009d5000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000c1c000-0x7a)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7a}, {&(0x7f00003c0000)="000000000000000000000000000000000000000000000000000000000000000000000000", 0x24}, {&(0x7f0000e40000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x4, &(0x7f0000661000-0x9)="000000000000000000", 0x9, 0x9}, 0x5}, {{0x0, 0x0, &(0x7f0000c5e000-0x30)=[{&(0x7f00000a9000-0xdb)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdb}, {&(0x7f0000397000-0xc0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc0}, {&(0x7f0000b3c000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x3, &(0x7f0000553000-0xf3)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf3, 0x85}, 0x3}, {{0x0, 0x0, &(0x7f00005fe000)=[], 0x0, &(0x7f0000a09000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa0, 0x8}, 0x3}, {{&(0x7f00005b6000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x60, &(0x7f0000257000-0x50)=[{&(0x7f00000dc000-0x72)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x72}, {&(0x7f00000fd000)="0000", 0x2}, {&(0x7f0000a4b000-0x78)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x78}, {&(0x7f0000dc2000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000038c000-0x21)="000000000000000000000000000000000000000000000000000000000000000000", 0x21}], 0x5, &(0x7f00007e9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28, 0x8}, 0xfffffffffffffffa}, {{&(0x7f000003b000-0x1002)=@un=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x1002, &(0x7f000051d000-0x10)=[{&(0x7f0000088000-0x95)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}], 0x1, &(0x7f00006b6000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5d, 0x1c}, 0x200}], 0x8, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa", 0xbf, 0x4003e, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000f2c000-0x4)=0x10001, 0x4) [ 89.041707] binder: 8190:8211 ERROR: BC_REGISTER_LOOPER called without request 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000", 0x1b}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 3: mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000000) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x10110, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000013000)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f70746d7800", 0x0, 0x0) mlock(&(0x7f000000b000/0x1000)=nil, 0x1000) fcntl$setownex(r3, 0xf, &(0x7f0000010000)={0xfffffffffffffffc, r2}) prctl$getreaper(0x2f, &(0x7f0000010000-0x8)=0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000013000)=0x0) ioctl$TCSETA(r3, 0x5402, &(0x7f0000013000-0xc)={0x3, 0x0, 0xfaaa, 0x800, 0x2, 0x200, 0x4f6c48bf, 0x20000001000, 0x9, 0x7a}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f000000b000)={0x1, 0x7ff, 0xffffffff, 0x0, 0x9, 0x0}) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x5432, &(0x7f0000016000-0x8)=0x0) r5 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000001000-0x4)=0x80000001, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000006, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x3, 0xfffffffffffffffd) mmap(&(0x7f0000004000/0xd000)=nil, 0xd000, 0x3, 0x12, r3, 0x800000000) fcntl$lock(r3, 0x5, &(0x7f0000016000-0x20)={0x1, 0x0, 0x7f, 0x2, r4}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000008000)=0x100000005, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000003000-0x4)=0x100000002, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000000c000-0x4)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000004000)={0x20071026, r7}, &(0x7f0000008000)={0x4, 0xa6e9, 0x3f, 0x91cc, 0x80, 0xffffffffffff8000}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r6, &(0x7f0000004000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x10122, &(0x7f0000009000-0x60)=@ax25={0x3, {"2c59ee0e8e4f12"}, 0x1}, 0x10) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r6, &(0x7f0000009000)="", 0x0, 0x20000850, &(0x7f0000007000-0x10)={0x2, 0x0, @rand_addr=0xffffffffffffffa9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:45 executing program 0: syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6175746f667300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x84, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f}, @in6={0xa, 0x2, 0xbe3, @loopback={0x0, 0x1}, 0x25}, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}]}, &(0x7f0000efe000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001000-0x8)={r2, 0x1ff}, &(0x7f0000194000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) tee(r2, r1, 0x0, 0x5) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000491000)=0x0) execve(&(0x7f000076f000-0x8)="2e2f66696c653000", &(0x7f000086e000)=[&(0x7f0000105000)="292f73656375726974792f3a5b76626f786e6574302f266e6f6465762d73656c696e75786d696d655f74797065637075736574297d747275737465642d00"], &(0x7f0000fbf000-0x28)=[&(0x7f00009bf000-0x10)="757365722a707070306367726f757000", &(0x7f0000a75000-0xa)="73797374656d2c766d6e657431256e6f6465765c00", &(0x7f0000573000)="5e00", &(0x7f0000387000-0x1)="00", &(0x7f00007ac000)="2c253a6e6f6465762d76626f786e65743000"]) sched_rr_get_interval(r1, &(0x7f0000617000)={0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x3, 0xfffffffffffffffe) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000602000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000d1f000-0x10)={r4, &(0x7f0000a36000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) clock_gettime(0x0, &(0x7f000086a000-0x10)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000720000)={0x0, 0x0}) write$evdev(r2, &(0x7f0000e9b000)=[{{0x77359400, 0x0}, 0x1f, 0x4, 0xa4}, {{r5, r6/1000+10000}, 0x2800000, 0x3, 0x4}, {{0x0, 0x2710}, 0x3, 0x1c, 0x3}, {{0x0, 0x0}, 0x5c, 0x7, 0x80000000}, {{0x0, 0x7530}, 0x1, 0x20, 0x3ff}, {{r7, r8/1000+30000}, 0x7, 0x8, 0xfffffffffffff000}, {{0x0, 0x2710}, 0x1, 0x80000001, 0xfffffffffffffffa}, {{0x0, 0x0}, 0x8, 0x400, 0x6241b1be}, {{0x0, 0x2710}, 0x100, 0x9, 0x1}], 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f000059b000)="2f6465762f6175746f667300", 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f000035e000)=[{&(0x7f0000a78000)="a0f97bb147e4917fb419c370ec861abea9158888e02c2584788d67f109fb1abedbd2924acd2e91522b8149b5", 0x2c}, {&(0x7f0000eba000-0xa9)="390300e0637c677cd6efa43edc615b3e5798fc83aa62edb48e075de51960b2279e2e78ec9e511895b243bd1e4a9df71562c327f22fa21237259cf59ee5b04d37015939032443b9195c5cdb3961c814a1ac967b081d2da0b80bb7cfcb81960ccb5954230a04ac3fc505fb02fec44cd049d2f955b6c8a8de0ab132873e325e3206dfbd039937c15265d685fd5628796bea6c9f8a28bb8a152108baffd479af7e8ed9e36d384432ee6826", 0xa9}, {&(0x7f000006e000)="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", 0xfff}, {&(0x7f0000970000-0x9)="849597fdfb000011fb", 0x9}, {&(0x7f0000039000)="ab74800703ba3203add647cc239a48a162e11f4c8c11d72c01c8c3967458800b617048ee96d1c6e6579c4f4789e1def5a25f742a6e6e6a7cdcd923925e8736daa6a2ccfb19c1cc0901e797493f51360c6920dd5a789432dbaec710894668f556ed4b4ea2181ef211d4f4e86394aca6ad36eccdb551d67e2c733ac8a0b365dbd7418ac912ed8821a8e8952a3a05a595211b81c00a5d168234d7935a2ab68a2a5b8654cd6fc6055ddc6dc5fa79eb9bea3e02926d63fec158f0fd55effad4b72390d72674d6a7a67b667b43a44f11467512d41b1b94ea3005154789abfd", 0xdc}], 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) r6 = accept$alg(r4, 0x0, 0x0) close(r6) [ 89.041721] binder: 8190:8211 BC_INCREFS_DONE u0000000080000000 no match [ 89.041728] binder: 8190:8211 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="00000000000000000000000000000000000000000000000000000000000000", 0x1f}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f000048f000)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r3, 0x0, 0x0) close(r6) 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r0 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 2017/12/02 23:46:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000a0000-0x9)="2f6465762f73672300", 0x3, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000cf2000+0x591)={0x1, 0x72}) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000", 0x1b}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000039e000)="2f6465762f7161745f6164665f63746c00", 0x12002, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x1000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000541000-0x18)={0xaa, 0x3d, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000ffc000-0x1)="0000000000000000000000000000000000000000000000", 0x17, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000441000)={r3, &(0x7f00003a4000-0x7b)="a4e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2ff2ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) [ 89.290999] binder: 8281:8290 ERROR: BC_REGISTER_LOOPER called without request [ 89.298496] binder: 8281:8290 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x8000002, 0x78, 0x100, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffeffd, 0x0, 0x4, 0x8, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x3, 0x7fffffff, &(0x7f0000426000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000429000)=0x0, &(0x7f0000cf6000-0x4)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") connect$unix(r2, &(0x7f00002b7000)=@file={0x1, "2e2f66696c653000"}, 0xa) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00005fb000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) clock_gettime(0x0, &(0x7f00009b4000)={0x0, 0x0}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000222000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000c88000-0x1a4)=[{{&(0x7f00008be000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000ca0000-0x10)=[{&(0x7f0000b34000-0x1b)="000000000000000000000000000000000000000000000000000000", 0x1b}], 0x1, &(0x7f00008e1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x4}, 0x8}, {{&(0x7f00008e3000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x60, &(0x7f0000e73000)=[{&(0x7f00007a2000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x96}, {&(0x7f00009b2000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000ea3000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc3}], 0x3, &(0x7f00005ed000-0xe8)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8, 0x3}, 0xffffffff80000001}, {{&(0x7f00001f2000-0x60)=@nfc_llcp={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x60, &(0x7f0000099000)=[{&(0x7f0000607000-0xb3)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb3}, {&(0x7f0000940000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2f}, {&(0x7f0000818000-0xd1)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd1}, {&(0x7f0000a4a000-0x64)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x64}], 0x4, &(0x7f00003c2000-0x4c)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4c, 0x2}, 0x3}, {{&(0x7f000037a000)=@un=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000f9f000)=[{&(0x7f0000db9000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4d}, {&(0x7f00007e0000)="00000000000000000000000000000000000000000000000000000000000000000000", 0x22}, {&(0x7f000063e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x53}], 0x3, &(0x7f000061b000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x4}, 0x800}, {{&(0x7f00000ff000)=@in6={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, 0x1c, &(0x7f0000233000)=[{&(0x7f0000ea4000-0xfb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfb}, {&(0x7f00009be000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xad}, {&(0x7f00007a1000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000de0000)="", 0x0}, {&(0x7f0000b9c000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000062a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4}, {&(0x7f000031c000-0x3b)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3b}], 0x7, 0x0, 0x0, 0x5f06}, 0x3ff}, {{0x0, 0x0, &(0x7f0000bf0000-0x20)=[{&(0x7f0000c81000-0x43)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x43}, {&(0x7f00003c9000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f}], 0x2, &(0x7f00008e5000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b, 0x1f}, 0x100000000}, {{&(0x7f0000082000-0x10)=@ax25={0x0, {"00000000000000"}, 0x0}, 0x10, &(0x7f000014e000)=[{&(0x7f0000fc9000)="000000000000000000000000000000000000000000000000", 0x18}, {&(0x7f0000875000-0x65)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x65}, {&(0x7f0000818000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x83}, {&(0x7f00008bc000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x4, 0x0, 0x0, 0x3496}, 0x9}], 0x7, 0x0, &(0x7f00005a3000)={r4, 0x989680}) 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) mlockall(0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utime(&(0x7f0000004000-0x8)="2e2f66696c653000", &(0x7f0000001000)={0x40000, 0x5}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000014000-0x8)="2e2f66696c653000", 0x0, 0x20) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet(r1, &(0x7f0000005000-0x10)={0x0, 0x0, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000)=0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = creat(&(0x7f0000000000)="2e2f66696c653000", 0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @connect={{0x0, 0x0}, {0x0, 0x1000000000000}}}], 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000a78000)="2f6465762f736e642f74696d657200", 0x0, 0x26800) unlink(&(0x7f0000b4b000-0x8)="2e2f66696c653000") r3 = creat(&(0x7f0000177000)="2e2f66696c653100", 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000116000)=0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00009cc000-0xc)={&(0x7f0000b1b000+0xd6f)="2e2f66696c653100", 0x0}, 0xc) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000339000-0x7b)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f000074d000-0x8)=0x5000) umount2(&(0x7f0000b88000)="2e2f66696c653100", 0x0) mkdir(&(0x7f00005b7000-0x8)="2e2f66696c653100", 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) open(&(0x7f000053e000)="2e2f66696c653100", 0x2000, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00003df000)={0x9, &(0x7f0000e07000)="0000000000000000000000000000000000000000000000", &(0x7f0000f74000-0xd8)=[{0x5133, 0x83, 0xffffffffffffff48, &(0x7f0000370000-0x83)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x1000, 0xc8, 0x7, &(0x7f00000ee000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0xfffffffffffffffe, 0xf6, 0x800, &(0x7f00009a7000-0xf6)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0xfffffffffffff812, 0xbf, 0x451e, &(0x7f00000e2000-0xbf)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x3f000000000000, 0x2b, 0x0, &(0x7f0000e30000-0x2b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x1f5629d4, 0xb1, 0x5, &(0x7f000031b000-0xb1)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x3, 0xa3, 0x0, &(0x7f00000a5000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x4, 0xa2, 0x2df8, &(0x7f00005ef000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x40, 0xa2, 0xfffffffffffffa52, &(0x7f0000981000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) 2017/12/02 23:46:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x80000, 0x1f, &(0x7f0000a92000)={0x0, 0x0}) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x0) r2 = syz_open_dev$mouse(&(0x7f00009ea000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000b95000)=@assoc_value={0x0, 0x0}, &(0x7f000000b000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000b79000-0x8)={r3, 0x7e9}, 0x8) r4 = add_key$keyring(&(0x7f0000e27000-0x8)="6b657972696e6700", &(0x7f000055e000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000e8d000)="6b657972696e6700", &(0x7f0000fbd000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, r4) r5 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00003d8000)=0x100, &(0x7f000058f000)=0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000867000-0xc)={@loopback=0x0, @multicast1=0x0, @multicast1=0x0}, &(0x7f00005e0000-0x4)=0xc) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000433000-0x9)="2f6465762f76637300", 0x2000, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r6, 0x89e1, &(0x7f000051f000-0x4)=0x5) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="000000000000000000000000000000000000000000000000000000", 0x1b}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000a15000-0x5e)="41c0e7f92a2fc92f8ea6edd9897dd6cdb13a0fcf1fc8efe1b785640b7a041ccfba4c70ae67e9b8876911250c66a48c3fb2907f430deb8720966a669deb5abe85d5cfe158a784774059aed9a84ca6c7a1093f38034f3ca46b7a54e982e4c3", 0x5e) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000cee000)="2f6465762f72746300", 0x181800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 89.373776] binder: 8281:8290 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="", 0x0, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) uselib(&(0x7f0000e2d000)="2e2f66696c653000") recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000fb2000-0x4)=0x100) 2017/12/02 23:46:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f000012c000-0xc)={@rand_addr=0x0, @empty=0x0, 0x0}, &(0x7f0000e4b000-0x4)=0xc) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00002a6000)={@remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, r4}, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r7 = accept$alg(r5, 0x0, 0x0) close(r7) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="000000000000000000000000", 0xc, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 89.454241] binder: 8325:8327 ERROR: BC_REGISTER_LOOPER called without request [ 89.461692] binder: 8325:8327 BC_INCREFS_DONE u0000000080000000 no match [ 89.490639] binder: 8325:8327 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000515000-0xc)="2f6465762f72666b696c6c00", 0x200000, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f000033c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000063a000)=0x56) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000693000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003cf000-0x4)=0xe8) stat(&(0x7f0000b71000-0x8)="2e2f66696c653000", &(0x7f00009d3000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) r4 = accept4(r0, &(0x7f000029e000-0x10)=@ax25={0x0, {"00000000000000"}, 0x0}, &(0x7f00004fb000)=0x10, 0x800) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f000069b000-0x90)={0x7ff, {{0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000146000-0x2)={0x58b, 0x8}, 0x2) r7 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4068aea3, &(0x7f0000a71000-0x68)={0x7b, 0x0, [0x8, 0x7, 0x5, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="00000000000000000000000000000000000000000000000000000000", 0x1c}, {&(0x7f0000027000-0xd)="00000000000000000000000000", 0xd}], 0x2, 0x45) 2017/12/02 23:46:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00006bd000-0x8)={0x0, 0x6}, &(0x7f0000439000-0x4)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={r0, 0xc000800000000001, 0x10000, 0x6}, 0x10) r1 = socket(0x11, 0x802, 0x0) bind$packet(r1, &(0x7f0000fc4000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @random="089306e72229", [0x0, 0x0]}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000)="", 0x47e) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x3, 0x40000000040) sendto$inet(r2, &(0x7f00003ae000-0xbb)="", 0x0, 0x0, &(0x7f0000aac000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmmsg$nfc_llcp(r2, &(0x7f0000239000-0x38)=[{&(0x7f00000a2000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a627cfd86399dfac2063b4a66021e531678e893e12003ab58c3204d87637cb25d67298ca57fad84a7a71bdfb674dcd27daed2fc91b715303fffc878eb6b571", 0x0}, 0x60, &(0x7f00006bb000)=[], 0x0, &(0x7f0000303000)={0x10, 0x1, 0x0, ""}, 0x10, 0x0}], 0x1, 0x0) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000b26000)={0x0, 0x4}, &(0x7f000060a000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000e32000-0x8)={r3, 0x4}, 0x8) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="00", 0x1, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00009bc000)={0x0, 0x0, 0x0}, &(0x7f00005bb000)=0xc) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00002d5000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$ax25(r1, &(0x7f00000c5000)={0x3, {"e62e2c75aa39f5"}, 0x0}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r7 = accept$alg(r5, 0x0, 0x0) close(r7) 2017/12/02 23:46:45 executing program 3: mmap(&(0x7f0000000000/0x2f0000)=nil, 0x2f0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002eb000+0xc58)={0x26, "6165616400000000000000000000", 0x0, 0x200000000000, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000)="a23364fd5e580ef24d71a19dd93fc727", 0x10) pipe(&(0x7f000003c000-0x8)={0x0, 0x0}) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$nfc_llcp(r3, &(0x7f00002f1000-0xa8)=[{&(0x7f00002f0000)={0x27, 0x4, 0x400, 0x6, 0x8, 0x401, "ccc29b7da1f65b82191ccd9ec804dda7d5bc546dc18f064ac2b3a9d50476acbf9e52978a8739ac5b6e6f117ba3730f1ca12d51c70da36ea3cabbe6caeef2ca", 0x1}, 0x60, &(0x7f00001e2000)=[{&(0x7f000027c000)="", 0x0}, {&(0x7f0000192000-0x2)="622a", 0x2}], 0x2, &(0x7f00002f1000-0x110)={0x110, 0x10f, 0x8, "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"}, 0x110, 0x4080}, {&(0x7f00002f1000-0x60)={0x27, 0x9, 0x0, 0x1, 0x44c, 0x4, "c01c17cf0e36071beb47d7671c346ca003b669834364b9ad6526d9314ec9cdeeff3c98ed56551c891d8798268aa2126bc0298f16c3380f4c921311ea9f7409", 0x40}, 0x60, &(0x7f0000099000-0x40)=[{&(0x7f00002f0000)="", 0x0}, {&(0x7f00002f0000)="a9256bfb7dc5152a32a63a2535f474711b8dbe2411e2cea4e0aea8bec5987f8978f8f15684e141ff7342055b2005ded51279b1efa09dedaf34a830e86ac46f4e90379cbea3ed72875d1b73661d69cfdf1a157f957e228cb0bf766de15ecba304694f8b4c203132f2d9a3ebb54a7c0a42eb06740515274bc6b1", 0x79}, {&(0x7f00002f1000-0x9d)="6fef9eb5bd449884ba93c91a131ad740133a8a9dda91d5c56e160f53b8f926c5f6e2243663036a96ef2907630f4e73131c4409a06eece1ed432c279f877d2f0f6ced4b0b78624a68971bda76bfb603bd310b273680e6cac7b34886ba7e82beb334b0f3461ff5e9ac0062349d207f598d656bce02bdbcdeedf330aaf11e83a27688c1610a4c0904780cafdb5421c6ffc740ca76e01d2817af5802a29911", 0x9d}, {&(0x7f00000d2000-0x82)="944cfe2cc51acdf904c79f657e5e88a9dcdfbb193613987d7f7cbf43d7feb04e6a7c98142632d39bc0329cb65e31ab8e0f3a8fad03320563930a96581a35c2d64dc4633c9a351ea648655af80afe6cd857801a626f9371d8a263d55f94ae45a318c62830e39cd7de58868d3f4ff07140e867ddd1a7099a1dda8a7b3f9014e30db73c", 0x82}], 0x4, 0x0, 0x0, 0x1}, {&(0x7f00000ff000)={0x27, 0x0, 0x5, 0x7, 0xcb42, 0x8000, "95605938eab4478e990992543f05a1ec4aaad740e1ab7d66c576dad8d38d6c21f3617651255d26c15d8bc6991f5a1b1c91137583dbe65dbab01b74ec4d841d", 0x6}, 0x60, &(0x7f00002f0000)=[{&(0x7f00002f0000)="9cf82d1cfbad6a7a9686ac5a1311b008c0ea3fdad22e709389961a1c6fe982224f388b09019a149c084b2ffa4ba8ca118fd12e7673bae25384fc9573d06603ce1afe050be7243835a58b2ac94730953944bb8e0faa33f2db83874d7d03c387f60d18bda27df650507270e651d4714be468317f998c1ab6917718d18089871200b675aa1360bfd120049b74957b227bf6fde25df9e3c228ccbca08032707097c2ae5dfae19fd2c034ed863c1f796bc9a69dd1c3b06d3999a942c01dac03fcbfd744404cd1ea8944", 0xc7}, {&(0x7f00002f0000)="14cbb3ce5ba87149a68ecaa27c7e1f704656f0ff3560eb3cd0bbf8c3d0255ef8667a2dc0360fd19ee3de29fb8a087301b9af0386e538df2ae1da988f968471cd702e898b8a7e9fb65e2823e3eb61604e5fa299cc2f8a7e9e738bc675908872431a7ea487a3a1a8c5f175d09dd258e739232bf699e9953247b738d5c42f5d8875a123acba24951ac545d65e05555dbd3a83cceac9a747d1c4ef923e80f00749a21b76078a275c8c77454c59d50c69a9837fcf54ed0b283f3030e8f7974ea69d4ba41b49b9afb615a655a170fa60cd07ce7af80e2c114f18181fd031878b0956d59fd9b8d6", 0xe4}, {&(0x7f0000035000)="67baf753da965d19aef71ccf9f05317f095386ffc1da255cf58a5b834c179330be12d2f0227f28377f31a63e4a9a38852db34606ad7d8e04301ea2317bd276e70a279f5afcec12a571567ddfdcaf4334959081f7b6928d2a37c723bf", 0x5c}, {&(0x7f00002b0000)="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", 0x1000}, {&(0x7f0000052000-0x92)="8073da377433debd973a050481636f3d17c9d19f47c6c01834018c2d90333c3e786f444fcd0008e520aed0961058e5b10250d39dd2f6febf93e7c0de386a03cedf3bbaf2a755341e62e8041988d637e5d707cb8846d5e9aa04a10ec1fc910bfdba782c299c67b5465ff125f5b27bc1d106e1d7fb0d233f1fdecaa01cf8c94a7ecb2bd37d563a1cbc028fde9254ef712f7a3e", 0x92}], 0x5, 0x0, 0x0, 0x80}], 0x3, 0x4040801) vmsplice(r3, &(0x7f000017d000-0x90)=[{&(0x7f0000017000-0x42)="89a72feaa29f2776441e8d5089aa684484512c235fc2a0110208f510b8526afd3fa75afec63ef436b14d6a7f4fb2d85dffd03d2bb746a7aba8d01022119e", 0x3e}, {&(0x7f0000066000)="c02d975c8a7aa117a24af3eedfe4efd97aec45b37714bd190a939208f4350223a7a8047b8d97ff73eff3f0478e7fe64c35887473b407f2e5f37991d8915a", 0x3e}, {&(0x7f0000018000)="", 0x0}, {&(0x7f0000116000-0x98)="72d300afac0ef2f2e4e8a3b261cb9b44c940dbab4dd7e7aa1ad8f6d94a1eae8734d2fc335e72f8d2cc5f500e5dc9e2f19ab4be1840bdfca4fb6891533237ee4f462aa1111a0301df05722c5950e08f35a17aa2c737844074ea90d58e2fbfb5f153f7f0e4a9fb9104cba7cfd0886c175685bc1edd62281ce2d79d7dde984591e3111419e5affa1eba72478ed5c7775e0ee59b6200f0326c80", 0x98}, {&(0x7f00000de000)="b924422c2cb7ba8c7e7bacd9cd0b3a70f11f095a9dfa", 0x16}, {&(0x7f00000e9000-0x87)="eb799ec13127259cc27e4c491c8ab069c5de6a3ad86b96d39741763813ebabd3b5c2dd69f423d7e0f62130eef7ba910e9713b3526d04358da29e2cb96bad3f99b8c9c9c3f1a01cc5c9c29832bdb6ab8bc0b3d0858544850c3c3332bbd6a8bee212cbc21bf26c66f3d0c080730a4244f9a6e4531c647094232106d6747d5b93af3778b6a1e9e7ec", 0x87}, {&(0x7f00002eb000)="b6ed2962450760839a68a41f24b5a6396c87982dc60c622d1a2f3e0d75e7feebb2737507db53d1b8", 0x28}, {&(0x7f00002ec000-0xf6)="97185bee1a1f54545238140cbe447ae57ebfee643011f38ff0e7dcd7edece1d8530e1b61488939c1f96633c7489b399de20aab99027ca2e741b230562cb21f7a2d0dd78b2cdb32e04b76a992411605ff9e4fbdc83bb82d154e42e079dd1d4406f9d9731385f997e4860c029762e537eb398c6a26f3d09aad2faf231d6b3895f900b4c2f7ebef94323fbbb7cdfa9b350091921c01fa2c26e6ee513e36a5a70eaabd3c2a0b4f106d77984af4d304216c9f58e58942ccbd61b3c081b7b0465d7c8a038eb7329aef3d08e46413a1729d3b63888ca5cb102ecd906dcdb9eea21a8ab8d868fc81df103bd57b11b7e11c0d3ba4ced0c4992c50", 0xf6}], 0x8, 0xe) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002f1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00002f2000-0x1e)="0fd5d708ba93ecdfafab3295a67db51d397fb595ca339887f3231bb151f3", 0x1e) mmap(&(0x7f00002f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00002f0000)={0x0, 0x0, 0x0, 0x0}, &(0x7f00002f0000)=0x5) splice(r2, 0x0, r1, 0x0, 0x10001, 0x6) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:45 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="00000000000000", 0x7, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) [ 89.557479] binder: 8325:8341 ERROR: BC_REGISTER_LOOPER called without request [ 89.564962] binder: 8325:8341 BC_INCREFS_DONE u0000000080000000 no match [ 89.577123] binder: 8325:8341 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") fcntl$getownex(r0, 0x10, &(0x7f00009f4000-0x8)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000da6000)={0x3, r2}) r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 2017/12/02 23:46:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 2017/12/02 23:46:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x0) 2017/12/02 23:46:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$unix(0xffffffffffffff9c, &(0x7f00006a2000)=@abs={0x0, 0x0, 0x0}, &(0x7f0000b62000-0x4)=0x8) fcntl$F_SET_FILE_RW_HINT(r0, 0x40d, &(0x7f00005c6000)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = creat(&(0x7f0000cdf000-0x8)="2e2f66696c653000", 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8975, &(0x7f0000f5f000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x1ff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x10100) timerfd_settime(r4, 0x1, &(0x7f00004bf000-0x20)={{0x0, 0x0}, {0x0, 0x1c9c380}}, &(0x7f0000f56000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) clock_gettime(0x0, &(0x7f00002a3000-0x10)={0x0, 0x0}) pselect6(0x40, &(0x7f0000c38000-0x40)={0x3c9, 0x9, 0x9, 0xff, 0x9, 0x3bf, 0x9fcb, 0x10001}, &(0x7f00009e1000-0x40)={0x5, 0x4, 0x7, 0x4, 0x5, 0xd6, 0xffff, 0x0}, &(0x7f00001ec000)={0x1, 0x1000, 0x101, 0x7, 0x2, 0x9, 0x80000000, 0x2}, &(0x7f0000c2f000)={r6, r7+30000000}, &(0x7f00004ac000-0x10)={&(0x7f00004c1000-0x8)={0x81}, 0x8}) utimes(&(0x7f0000fc6000)="2e2f66696c653000", &(0x7f0000aa1000-0x20)={{r5, 0x7530}, {r8, 0x0}}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00007a1000-0x12)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x40000000000001, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000842000)={0x2, 0x0}) prctl$void(0x22) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000871000-0xa)="2f6465762f7663732300", 0x1, 0x8040) fcntl$getownex(r2, 0x10, &(0x7f00009e1000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0xa, 0x78, 0xd4e5, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) fstatfs(r9, &(0x7f0000e3c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") fcntl$getown(r4, 0x9) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f000013d000-0x4)=0x1) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000495000-0x10)="2f6465762f73657175656e6365723200", 0x20000000042003, 0x0) ioctl$TCSETAF(r13, 0x5404, &(0x7f00004ea000)={0x0, 0x80000000000, 0xffffffffffffff80, 0x0, 0x7, 0x7, 0x0, 0x0, 0x400001000, 0x0}) bind$inet(r4, &(0x7f0000248000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendfile(r1, r3, &(0x7f00002e1000+0x3d2)=0x14005, 0x7c6c) 2017/12/02 23:46:46 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 89.649816] binder: 8393:8399 ERROR: BC_REGISTER_LOOPER called without request [ 89.657285] binder: 8393:8399 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) readahead(r1, 0x3, 0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) symlinkat(&(0x7f0000e60000-0x8)="2e2f66696c653000", r3, &(0x7f00004f1000-0x8)="2e2f66696c653000") 2017/12/02 23:46:46 executing program 6 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000838000-0xb)="6173796d6d657472696300", &(0x7f0000d69000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000071000-0x11)="657468316c6f747275737465647b272a00", 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r1, 0x101) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) [ 89.714250] binder: 8393:8418 ERROR: BC_REGISTER_LOOPER called without request [ 89.714265] binder: 8393:8418 BC_INCREFS_DONE u0000000080000000 no match [ 89.714271] binder: 8393:8418 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 89.782525] FAULT_INJECTION: forcing a failure. [ 89.782525] name failslab, interval 1, probability 0, space 0, times 0 [ 89.782535] CPU: 0 PID: 8432 Comm: syz-executor6 Not tainted 4.15.0-rc1-mm1+ #29 [ 89.782541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.782545] Call Trace: [ 89.782558] dump_stack+0x194/0x257 [ 89.782575] ? arch_local_irq_restore+0x53/0x53 [ 89.782589] ? lock_release+0xda0/0xda0 [ 89.782615] should_fail+0x8c0/0xa40 [ 89.782633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 89.782649] ? __mutex_lock+0x16f/0x1a80 [ 89.782656] ? seq_read+0xd5/0x13d0 [ 89.782666] ? __lock_acquire+0x6e9/0x47f0 [ 89.782681] ? find_held_lock+0x39/0x1d0 [ 89.782715] ? __lock_is_held+0xbc/0x140 [ 89.782752] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 89.782759] ? perf_trace_lock+0xd6/0x900 [ 89.782772] ? rcu_note_context_switch+0x710/0x710 [ 89.782808] should_failslab+0xec/0x120 [ 89.782826] kmem_cache_alloc_node_trace+0x5a/0x760 [ 89.782867] __kmalloc_node+0x33/0x70 [ 89.782884] kvmalloc_node+0x99/0xd0 [ 89.782899] traverse+0x752/0xa00 [ 89.782924] ? seq_hlist_next+0xc0/0xc0 [ 89.782943] ? seq_lseek+0x3c0/0x3c0 [ 89.782959] seq_read+0x96a/0x13d0 [ 89.782982] ? fsnotify+0x7b3/0x1140 [ 89.783005] ? seq_lseek+0x3c0/0x3c0 [ 89.783017] ? fsnotify_first_mark+0x2b0/0x2b0 [ 89.783034] ? avc_policy_seqno+0x9/0x20 [ 89.783043] ? selinux_file_permission+0x82/0x460 [ 89.783064] ? seq_lseek+0x3c0/0x3c0 [ 89.783077] proc_reg_read+0xef/0x170 [ 89.783097] do_iter_read+0x3db/0x5b0 [ 89.783114] ? dup_iter+0x260/0x260 [ 89.783146] vfs_readv+0x121/0x1c0 [ 89.783154] ? kernel_read+0x120/0x120 [ 89.783172] ? compat_rw_copy_check_uvector+0x2e0/0x2e0 [ 89.783202] ? fget_raw+0x20/0x20 [ 89.783230] ? __sb_end_write+0x9e/0xd0 [ 89.783249] ? fput+0xd2/0x140 [ 89.783269] do_preadv+0x11b/0x1a0 [ 89.783277] ? do_preadv+0x11b/0x1a0 [ 89.783297] SyS_preadv+0x30/0x40 [ 89.783312] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 89.783319] RIP: 0033:0x4529d9 [ 89.783325] RSP: 002b:00007fb6e459cc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000127 [ 89.783334] RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 00000000004529d9 [ 89.783339] RDX: 0000000000000001 RSI: 0000000020368000 RDI: 0000000000000013 [ 89.783344] RBP: 00000000000005ab R08: 0000000000000000 R09: 0000000000000000 [ 89.783350] R10: 0000000000000045 R11: 0000000000000212 R12: 00000000006f58a8 [ 89.783356] R13: 00000000ffffffff R14: 00007fb6e459d6d4 R15: 0000000000000000 2017/12/02 23:46:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000da9000-0xa)="2f6465762f6375736500", 0x200200, 0x0) r1 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000807000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000006a000)=0xe8) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f00004be000)={0x0, 0x0, 0x0}, 0xc) setresuid(r1, r2, r3) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f000030c000-0x98)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x13, 0x10, "9035b5e5fc2fd3aa0d092af90c95f861ba905716faaa57120b921c6e11721b36fd080765e458ea3f38ebfb5c30647f0b9d58287b303d1308fee6a34476333ca9", "3ff8c0a5243968d45056a064f0350ed2ae22a3afc9b685bc22f19c0787f67bce", [0xfffffffffffffff8, 0x8000], 0x0}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000ae000-0x8)=@assoc_value={0x0, 0x2}, &(0x7f00003da000)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000797000-0x8)={r4, 0x1ff}, &(0x7f00009c3000)=0x8) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r5 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) 2017/12/02 23:46:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000aae000)=0x5) 2017/12/02 23:46:46 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="", 0x0, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:46 executing program 6 (fault-call:2 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000ff5000)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000de8000-0x20)={0x2, 0x3, 0x0, 0x5, r6}) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r7 = accept$alg(r4, 0x0, 0x0) close(r7) 2017/12/02 23:46:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) [ 90.038363] binder: 8393:8399 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 90.067771] FAULT_INJECTION: forcing a failure. [ 90.067771] name failslab, interval 1, probability 0, space 0, times 0 2017/12/02 23:46:46 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="00", 0x1, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 90.092643] CPU: 0 PID: 8452 Comm: syz-executor6 Not tainted 4.15.0-rc1-mm1+ #29 [ 90.097584] binder: 8448:8456 ERROR: BC_REGISTER_LOOPER called without request [ 90.097596] binder: 8448:8456 BC_INCREFS_DONE u0000000080000000 no match [ 90.097601] binder: 8448:8456 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 90.107468] binder: 8448:8456 ERROR: BC_REGISTER_LOOPER called without request [ 90.107478] binder: 8448:8456 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:46 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x0, &(0x7f0000ffb000-0x10)={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 90.107484] binder: 8448:8456 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 90.144217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.153562] Call Trace: [ 90.156146] dump_stack+0x194/0x257 [ 90.159757] ? arch_local_irq_restore+0x53/0x53 [ 90.164409] should_fail+0x8c0/0xa40 [ 90.168102] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 90.173189] ? __lock_is_held+0xbc/0x140 [ 90.177239] ? find_held_lock+0x39/0x1d0 [ 90.181292] ? __lock_is_held+0xbc/0x140 [ 90.185341] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 90.191222] ? rcu_note_context_switch+0x710/0x710 [ 90.196146] ? __lock_acquire+0x6e9/0x47f0 [ 90.200375] should_failslab+0xec/0x120 [ 90.204325] kmem_cache_alloc+0x47/0x760 [ 90.208633] ptlock_alloc+0x24/0x70 [ 90.212667] pte_alloc_one+0x59/0x100 [ 90.216443] do_huge_pmd_anonymous_page+0x554/0x19e0 [ 90.221520] ? print_usage_bug+0x3f0/0x3f0 [ 90.225736] ? __thp_get_unmapped_area+0x130/0x130 [ 90.231423] ? __lock_acquire+0x6e9/0x47f0 [ 90.236158] ? __lock_acquire+0x6e9/0x47f0 [ 90.240375] ? check_noncircular+0x20/0x20 [ 90.244580] ? trace_event_raw_event_lock+0x340/0x340 [ 90.249762] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 90.254930] ? check_noncircular+0x20/0x20 [ 90.259138] ? find_held_lock+0x39/0x1d0 [ 90.263170] ? perf_trace_lock+0xd6/0x900 [ 90.267298] ? trace_event_raw_event_lock+0x340/0x340 [ 90.272462] ? __free_insn_slot+0x5c0/0x5c0 [ 90.276755] ? check_noncircular+0x20/0x20 [ 90.280961] ? find_held_lock+0x39/0x1d0 [ 90.285003] __handle_mm_fault+0x1bd6/0x3e60 [ 90.289389] ? check_noncircular+0x20/0x20 [ 90.293602] ? __pmd_alloc+0x4e0/0x4e0 [ 90.297462] ? find_held_lock+0x39/0x1d0 [ 90.301506] ? lock_downgrade+0x980/0x980 [ 90.305624] ? __lock_is_held+0xbc/0x140 [ 90.309687] handle_mm_fault+0x38f/0x930 [ 90.313716] ? down_read_trylock+0xdb/0x170 [ 90.318024] ? __handle_mm_fault+0x3e60/0x3e60 [ 90.322577] ? vmacache_find+0x5f/0x280 [ 90.326519] ? vmacache_update+0xfe/0x130 [ 90.330640] ? find_vma+0x30/0x150 [ 90.334156] __do_page_fault+0x5c9/0xc90 [ 90.338199] ? mm_fault_error+0x2c0/0x2c0 [ 90.342315] ? find_held_lock+0x39/0x1d0 [ 90.346355] ? check_noncircular+0x20/0x20 [ 90.350574] do_page_fault+0xee/0x720 [ 90.354347] ? __do_page_fault+0xc90/0xc90 [ 90.358550] ? find_held_lock+0x39/0x1d0 [ 90.362596] ? lock_downgrade+0x980/0x980 [ 90.366715] ? __might_fault+0xe0/0x1d0 [ 90.370665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 90.375488] page_fault+0x2c/0x60 [ 90.378908] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 90.384506] RSP: 0018:ffff8801c5f7fa78 EFLAGS: 00010207 [ 90.389847] RAX: ffffed003833f80e RBX: 000000000000001d RCX: 0000000000000003 [ 90.397086] RDX: 0000000000000005 RSI: ffff8801c19fc04e RDI: 00000000204f1f79 [ 90.404327] RBP: ffff8801c5f7faa8 R08: 3020202020202020 R09: ffffed003833f80e [ 90.411566] R10: 0000000000000005 R11: ffffed003833f80d R12: 00000000204f1f79 [ 90.418816] R13: ffff8801c19fc04e R14: 00007ffffffff000 R15: 00000000204f1f96 [ 90.426084] ? _copy_to_user+0x9b/0xc0 [ 90.429949] seq_read+0x875/0x13d0 [ 90.433470] ? fsnotify+0x7b3/0x1140 [ 90.437163] ? seq_lseek+0x3c0/0x3c0 [ 90.440855] ? fsnotify_first_mark+0x2b0/0x2b0 [ 90.445412] ? avc_policy_seqno+0x9/0x20 [ 90.449443] ? selinux_file_permission+0x82/0x460 [ 90.454261] ? seq_lseek+0x3c0/0x3c0 [ 90.457947] proc_reg_read+0xef/0x170 [ 90.461731] do_iter_read+0x3db/0x5b0 [ 90.465506] ? dup_iter+0x260/0x260 [ 90.469118] vfs_readv+0x121/0x1c0 [ 90.472627] ? kernel_read+0x120/0x120 [ 90.476487] ? compat_rw_copy_check_uvector+0x2e0/0x2e0 [ 90.481833] ? fget_raw+0x20/0x20 [ 90.485269] ? __sb_end_write+0x9e/0xd0 [ 90.489233] ? fput+0xd2/0x140 [ 90.492409] do_preadv+0x11b/0x1a0 [ 90.495918] ? do_preadv+0x11b/0x1a0 [ 90.499606] SyS_preadv+0x30/0x40 [ 90.503037] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 90.507767] RIP: 0033:0x4529d9 [ 90.510933] RSP: 002b:00007fb6e459cc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000127 [ 90.518609] RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 00000000004529d9 [ 90.525849] RDX: 0000000000000001 RSI: 0000000020368000 RDI: 0000000000000013 [ 90.533088] RBP: 00000000000005ab R08: 0000000000000000 R09: 0000000000000000 2017/12/02 23:46:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000c46000-0x8)="2e2f66696c653000") syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000838000-0xb)="6173796d6d657472696300", &(0x7f0000d69000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000071000-0x11)="657468316c6f747275737465647b272a00", 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r1, 0x101) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcc000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = creat(&(0x7f0000cdf000-0x8)="2e2f66696c653000", 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8975, &(0x7f0000f5f000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x1ff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x10100) timerfd_settime(r4, 0x1, &(0x7f00004bf000-0x20)={{0x0, 0x0}, {0x0, 0x1c9c380}}, &(0x7f0000f56000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) clock_gettime(0x0, &(0x7f00002a3000-0x10)={0x0, 0x0}) pselect6(0x40, &(0x7f0000c38000-0x40)={0x3c9, 0x9, 0x9, 0xff, 0x9, 0x3bf, 0x9fcb, 0x10001}, &(0x7f00009e1000-0x40)={0x5, 0x4, 0x7, 0x4, 0x5, 0xd6, 0xffff, 0x0}, &(0x7f00001ec000)={0x1, 0x1000, 0x101, 0x7, 0x2, 0x9, 0x80000000, 0x2}, &(0x7f0000c2f000)={r6, r7+30000000}, &(0x7f00004ac000-0x10)={&(0x7f00004c1000-0x8)={0x81}, 0x8}) utimes(&(0x7f0000fc6000)="2e2f66696c653000", &(0x7f0000aa1000-0x20)={{r5, 0x7530}, {r8, 0x0}}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00007a1000-0x12)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x40000000000001, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000842000)={0x2, 0x0}) prctl$void(0x22) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000871000-0xa)="2f6465762f7663732300", 0x1, 0x8040) fcntl$getownex(r2, 0x10, &(0x7f00009e1000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0xa, 0x78, 0xd4e5, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) fstatfs(r9, &(0x7f0000e3c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") fcntl$getown(r4, 0x9) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f000013d000-0x4)=0x1) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000495000-0x10)="2f6465762f73657175656e6365723200", 0x20000000042003, 0x0) ioctl$TCSETAF(r13, 0x5404, &(0x7f00004ea000)={0x0, 0x80000000000, 0xffffffffffffff80, 0x0, 0x7, 0x7, 0x0, 0x0, 0x400001000, 0x0}) bind$inet(r4, &(0x7f0000248000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendfile(r1, r3, &(0x7f00002e1000+0x3d2)=0x14005, 0x7c6c) 2017/12/02 23:46:46 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000fd9000)="2e2f66696c653000", 0x40000, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000021000)={0x1, 0x8, 0x1, 0x76a, 0x8}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") fadvise64(r1, 0x24, 0x3ff, 0x3) r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00007f3000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000a0b000)=0x5) 2017/12/02 23:46:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f000054b000-0x19)={@common="65716c00000000000000000000000000", @ifru_flags=0x100}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00004a7000)={0x0, 0x2710}, 0x10) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) recvmsg(r4, &(0x7f00004b1000-0x38)={&(0x7f0000672000)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f000046c000-0x30)=[{&(0x7f00009bd000-0x41)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x41}, {&(0x7f0000928000-0x9c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9c}, {&(0x7f0000cab000-0x7c)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7c}], 0x3, &(0x7f0000faa000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb0, 0x6}, 0x120) bind$alg(r3, &(0x7f00007ad000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28646573335f6564652d61736d290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r2, &(0x7f000036e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) [ 90.540326] R10: 0000000000000045 R11: 0000000000000212 R12: 00000000006f58a8 [ 90.547566] R13: 00000000ffffffff R14: 00007fb6e459d6d4 R15: 0000000000000000 2017/12/02 23:46:46 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x72fd506a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$ax25(0xffffffffffffff9c, &(0x7f000086b000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000001000-0x8)={r1, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000079000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x5, 0x8000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = accept$packet(0xffffffffffffff9c, &(0x7f0000222000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000001000-0x4)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f00003a7000-0x4)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000c5e000-0xbc)={0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, "0000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00004bc000-0x4)=0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00004a5000-0x58)={0x26, "6861736800000000000000000000", 0x2, 0x4, "736861332d3232340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) pipe(&(0x7f00002c4000)={0x0, 0x0}) r10 = accept$alg(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000d91000-0xb8)={0x0, 0x1, 0x0, 0x0, 0x1, 0x4, 0x386, 0x4, {0x0, @in6={{0xa, 0x2, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0xff, 0xff, 0x2, 0x8}}, &(0x7f0000727000)=0xb8) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000a8c000-0x8)={r11, 0xff}, 0x8) vmsplice(r9, &(0x7f0000436000)=[{&(0x7f000035d000-0xec)="1e0568a5adfb445cd4bb8794b55539e8bed519bdee90d8049f60221ad86272d44437eab8c25dc0319757636ae46752f1d78ff5579c1dda5dd82e23379d2480d2f897870f4172884394714ed8c0891fe393ee83a3a41eee151004882836fc1d2122425563e7af7e2f40ce3fe69d635bef6d2bd712ea1ee54898090cff3f93b07c", 0x80}], 0x1, 0x4) splice(r8, 0x0, r10, 0x0, 0x800000000000000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000a90000-0x20)={0xfffffffffffffff7, 0x7ff, 0x1, 0x400, 0xb, 0x5}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r12 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000649000)=[{0x2, 0x5}, {0x3, 0x9eb}], 0x2) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r3) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:46 executing program 4 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 90.589453] binder: 8475:8481 ERROR: BC_REGISTER_LOOPER called without request [ 90.597051] binder: 8475:8481 BC_INCREFS_DONE u0000000080000000 no match [ 90.623689] binder: 8475:8481 unknown command 0 2017/12/02 23:46:46 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x11)="2f6465762f7667615f6172626974657200", 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000000)={r1, r2, 0xffffffffffffff81, 0x6, &(0x7f0000001000-0xc3)="00e2b2a039ef5a264751af00f84e9ce85f0550d2d1e6d1a232c9643edcfd9b6fd5329417efbf31f97d8ae8a2645f21dd8cd9bdf0d43ea0af6edce6bee1a2f2f08ef642c9d21c163d5536c9a927ed54a7a7d187961633a35b0fc59b274e5ee8513e87d3c065d45dc4eaea035eea2c6fd19170a1b4ddcca70aa06559f0bc727e26a188bd6dd15fc9fdfc3f8e79a7f253bbf4a311fea8c14d8425bf2dc9e629d5b5ce86287e093302df8f2218863fce6150c986a33f6d5baf3ad4e74694c00ca0daae00a9", 0x8, 0x6, 0x1, 0x3a2d35c9, 0x800, 0xffffffffffffffdb, 0x2, "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"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r4 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) 2017/12/02 23:46:46 executing program 7 (fault-call:7 fault-nth:0): mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000a47000)="2f6465762f6175746f667300", 0x20100, 0x0) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, 0x0, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00003c7000)=0x0) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000b7d000-0x8)={0x0, 0x9062}, &(0x7f0000a37000)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000e2c000-0x8)={r6, 0x7}, &(0x7f0000f06000)=0x8) r7 = accept$alg(r5, 0x0, 0x0) close(r7) [ 90.636633] binder: 8475:8497 ERROR: BC_REGISTER_LOOPER called without request [ 90.636651] binder: 8475:8497 BC_INCREFS_DONE u0000000080000000 no match [ 90.636658] binder: 8475:8497 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 90.697960] FAULT_INJECTION: forcing a failure. 2017/12/02 23:46:47 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000428000)={{0x1d000, 0x1000, 0xe, 0x5000000000, 0x7, 0x9, 0xfffffffffffffffb, 0x7, 0x7ff, 0x3ff, 0x289, 0x3f9, 0x0}, {0x16000, 0x1000, 0x1f, 0x3, 0xffffffff80000001, 0x40eb, 0x7, 0x2, 0x9, 0x5, 0x20, 0x4b, 0x0}, {0x3000, 0x4, 0xd, 0x9, 0x10000, 0x100000000, 0x65104115, 0x401, 0x3, 0x3, 0x1, 0x7ff, 0x0}, {0xf000, 0x10000, 0xf, 0x77f, 0xa4, 0x8001, 0x0, 0x7a8ddc04, 0x200, 0x7f, 0x3, 0x10000, 0x0}, {0x0, 0x2000, 0x8, 0x8001, 0xfffffffffffffff7, 0x7, 0x926, 0x8, 0x1ff, 0x1, 0xd234, 0xa4, 0x0}, {0x6000, 0x5000, 0x4, 0xffffffff, 0x7fff, 0x1000, 0x3, 0x200, 0x2, 0x401, 0x200, 0x7, 0x0}, {0x0, 0xf000, 0x3, 0x1, 0x9, 0x0, 0x5, 0x401, 0x2, 0x7fffffff, 0x1, 0x0, 0x0}, {0x4, 0x6000, 0xb, 0x7, 0x0, 0x0, 0x401, 0x7, 0xce98, 0x0, 0x7ff, 0x101, 0x0}, {0x100000, 0xf000, [0x0, 0x0, 0x0]}, {0xf000, 0xd000, [0x0, 0x0, 0x0]}, 0x80010020, 0x0, 0x0, 0x2104, 0xc, 0x0, 0x0, [0x400, 0x20, 0x0, 0x4]}) preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000890000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000897000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00009c1000)={r1, r2}) 2017/12/02 23:46:47 executing program 4: mlock(&(0x7f0000ec7000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() r2 = accept4$ax25(0xffffffffffffff9c, 0x0, &(0x7f0000c33000-0x4)=0x0, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00008d7000-0x12)="2f6465762f696e7075742f6576656e742300", 0xff, 0x101000) kcmp(r0, r1, 0x7, r2, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") set_mempolicy(0x3, &(0x7f0000a63000-0x8)=0x8, 0x100000000) r5 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000755000)={0x0, 0xcd}, &(0x7f00006e8000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00005b2000)={0x8, 0x7, 0x200, 0x1000, 0x80000001, 0x4, 0x2, 0x9000, r6}, &(0x7f00008e1000-0x4)=0x20) fcntl$F_SET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000083000-0x8)=0x1) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) 2017/12/02 23:46:47 executing program 7 (fault-call:7 fault-nth:1): mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 90.697960] name failslab, interval 1, probability 0, space 0, times 0 [ 90.698006] CPU: 0 PID: 8505 Comm: syz-executor7 Not tainted 4.15.0-rc1-mm1+ #29 [ 90.698011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.698015] Call Trace: [ 90.698028] dump_stack+0x194/0x257 2017/12/02 23:46:47 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f000015a000)=0x0) ptrace$peek(0x2, r7, &(0x7f0000dc1000-0x8)=0x0) [ 90.698045] ? arch_local_irq_restore+0x53/0x53 [ 90.698078] should_fail+0x8c0/0xa40 [ 90.698094] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 90.698113] ? __lock_is_held+0xbc/0x140 [ 90.698131] ? find_held_lock+0x39/0x1d0 [ 90.698166] ? __lock_is_held+0xbc/0x140 [ 90.698203] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 90.698212] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 90.698225] ? rcu_note_context_switch+0x710/0x710 [ 90.698232] ? print_usage_bug+0x3f0/0x3f0 [ 90.698258] should_failslab+0xec/0x120 [ 90.698272] kmem_cache_alloc+0x47/0x760 [ 90.698279] ? print_usage_bug+0x3f0/0x3f0 [ 90.698308] ptlock_alloc+0x24/0x70 [ 90.698321] pte_alloc_one+0x59/0x100 [ 90.698332] __pte_alloc+0x2a/0x310 [ 90.698350] __handle_mm_fault+0x2e14/0x3e60 [ 90.698356] ? check_noncircular+0x20/0x20 [ 90.698375] ? __pmd_alloc+0x4e0/0x4e0 [ 90.698386] ? find_held_lock+0x39/0x1d0 [ 90.698418] ? lock_downgrade+0x980/0x980 [ 90.698428] ? __lock_is_held+0xbc/0x140 [ 90.698491] handle_mm_fault+0x38f/0x930 [ 90.698498] ? down_read_trylock+0xdb/0x170 [ 90.698511] ? __handle_mm_fault+0x3e60/0x3e60 [ 90.698518] ? vmacache_find+0x5f/0x280 [ 90.698527] ? vmacache_update+0xfe/0x130 [ 90.698541] ? find_vma+0x30/0x150 [ 90.698559] __do_page_fault+0x5c9/0xc90 [ 90.698566] ? trace_event_raw_event_lock+0x340/0x340 [ 90.698588] ? mm_fault_error+0x2c0/0x2c0 [ 90.698620] do_page_fault+0xee/0x720 [ 90.698635] ? __do_page_fault+0xc90/0xc90 [ 90.698656] ? find_held_lock+0x39/0x1d0 [ 90.698703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 90.698733] page_fault+0x2c/0x60 [ 90.698743] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 90.698748] RSP: 0018:ffff8801c68ff560 EFLAGS: 00010202 [ 90.698757] RAX: ffffed003867b200 RBX: 0000000000000001 RCX: 0000000000000001 [ 90.698762] RDX: 0000000000000001 RSI: ffff8801c33d90c0 RDI: 0000000020ffbfff [ 90.698767] RBP: ffff8801c68ff590 R08: ffffed003867b219 R09: ffffed003867b219 [ 90.698772] R10: 0000000000000001 R11: ffffed003867b218 R12: 0000000020ffbfff [ 90.698777] R13: ffff8801c33d90c0 R14: 00007ffffffff000 R15: 0000000020ffc000 [ 90.698825] ? copyout+0x8a/0xb0 [ 90.698844] _copy_to_iter+0x262/0x13a0 [ 90.698852] ? check_noncircular+0x20/0x20 [ 90.698878] ? check_stack_object+0x68/0x140 [ 90.698897] ? _copy_from_iter_flushcache+0xf30/0xf30 [ 90.698918] ? check_stack_object+0x140/0x140 [ 90.698931] ? __lock_is_held+0xbc/0x140 [ 90.698970] skb_copy_datagram_iter+0x1b6/0xab0 [ 90.699002] ? __sk_queue_drop_skb+0x1d0/0x1d0 [ 90.699014] ? __local_bh_enable_ip+0x121/0x230 [ 90.699030] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.699041] ? lock_sock_nested+0x91/0x110 [ 90.699050] ? trace_hardirqs_on+0xd/0x10 [ 90.699060] ? __local_bh_enable_ip+0x121/0x230 [ 90.699084] tcp_recvmsg+0x123f/0x2620 [ 90.699091] ? lock_downgrade+0x980/0x980 [ 90.699133] ? tcp_recv_timestamp+0x4b0/0x4b0 [ 90.699166] ? __fget+0x362/0x580 [ 90.699192] ? iterate_fd+0x3f0/0x3f0 [ 90.699231] ? perf_trace_lock+0xd6/0x900 [ 90.699239] ? __lock_is_held+0xbc/0x140 [ 90.699251] ? sock_has_perm+0x29c/0x400 [ 90.699278] inet_recvmsg+0x14c/0x5f0 [ 90.699296] ? inet_create+0xf50/0xf50 [ 90.699309] ? iterate_fd+0x3f0/0x3f0 [ 90.699326] ? selinux_socket_recvmsg+0x36/0x40 [ 90.699337] ? security_socket_recvmsg+0x91/0xc0 [ 90.699351] ? inet_create+0xf50/0xf50 [ 90.699360] sock_recvmsg+0xc9/0x110 [ 90.699367] ? sockfd_lookup_light+0x104/0x150 [ 90.699384] SYSC_recvfrom+0x2dc/0x570 [ 90.699403] ? SYSC_getpeername+0x460/0x460 [ 90.699414] ? kernel_read+0x120/0x120 [ 90.699427] ? wait_for_completion+0x7b0/0x7b0 [ 90.699483] ? __sb_end_write+0x9e/0xd0 [ 90.699502] ? fput+0xd2/0x140 [ 90.699512] ? SyS_write+0x184/0x220 [ 90.699519] ? lockdep_sys_exit+0x47/0xf0 [ 90.699530] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 90.699544] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.699559] SyS_recvfrom+0x40/0x50 [ 90.699577] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 90.699584] RIP: 0033:0x4529d9 [ 90.699588] RSP: 002b:00007fdb666d0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002d [ 90.699597] RAX: ffffffffffffffda RBX: 00007fdb666d0aa0 RCX: 00000000004529d9 [ 90.699601] RDX: 0000000000000002 RSI: 0000000020ffbfff RDI: 0000000000000013 [ 90.699606] RBP: 00007fdb666d0a90 R08: 0000000020ffaff0 R09: 0000000000000010 [ 90.699610] R10: 0000000000000002 R11: 0000000000000212 R12: 00000000004b759b [ 90.699615] R13: 00007fdb666d0bc8 R14: 00000000004b759b R15: 0000000000000000 [ 90.786729] FAULT_INJECTION: forcing a failure. [ 90.786729] name failslab, interval 1, probability 0, space 0, times 0 [ 90.786744] CPU: 1 PID: 8518 Comm: syz-executor7 Not tainted 4.15.0-rc1-mm1+ #29 [ 90.786749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.786753] Call Trace: [ 90.786765] dump_stack+0x194/0x257 [ 90.786784] ? arch_local_irq_restore+0x53/0x53 [ 90.786815] should_fail+0x8c0/0xa40 [ 90.786835] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 90.786853] ? perf_trace_lock+0xd6/0x900 [ 90.786868] ? save_stack+0xa3/0xd0 [ 90.786888] ? find_held_lock+0x39/0x1d0 [ 90.786929] ? __lock_is_held+0xbc/0x140 [ 90.786977] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 90.786997] ? rcu_note_context_switch+0x710/0x710 [ 90.787030] should_failslab+0xec/0x120 [ 90.787044] kmem_cache_alloc+0x47/0x760 [ 90.787064] ? __might_sleep+0x95/0x190 [ 90.787084] __anon_vma_prepare+0xbc/0x6b0 [ 90.787096] ? do_raw_spin_trylock+0x190/0x190 [ 90.787106] ? anon_vma_fork+0x870/0x870 [ 90.787113] ? lockdep_init_map+0x3d/0x70 [ 90.787140] ? _raw_spin_unlock+0x22/0x30 [ 90.787151] ? __pte_alloc+0x1cb/0x310 [ 90.787171] __handle_mm_fault+0x2e5a/0x3e60 [ 90.787179] ? check_noncircular+0x20/0x20 [ 90.787207] ? __pmd_alloc+0x4e0/0x4e0 [ 90.787221] ? find_held_lock+0x39/0x1d0 [ 90.787253] ? lock_downgrade+0x980/0x980 [ 90.787264] ? __lock_is_held+0xbc/0x140 [ 90.787332] handle_mm_fault+0x38f/0x930 [ 90.787339] ? down_read_trylock+0xdb/0x170 [ 90.787353] ? __handle_mm_fault+0x3e60/0x3e60 [ 90.787362] ? vmacache_find+0x5f/0x280 [ 90.787371] ? vmacache_update+0xfe/0x130 [ 90.787386] ? find_vma+0x30/0x150 [ 90.787404] __do_page_fault+0x5c9/0xc90 [ 90.787411] ? trace_event_raw_event_lock+0x340/0x340 [ 90.787434] ? mm_fault_error+0x2c0/0x2c0 [ 90.787445] ? perf_trace_lock+0xd6/0x900 [ 90.787469] do_page_fault+0xee/0x720 [ 90.787483] ? __do_page_fault+0xc90/0xc90 [ 90.787500] ? find_held_lock+0x39/0x1d0 [ 90.787537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 90.787561] page_fault+0x2c/0x60 [ 90.787570] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 90.787575] RSP: 0018:ffff8801c0397560 EFLAGS: 00010202 [ 90.787583] RAX: ffffed0038282f00 RBX: 0000000000000001 RCX: 0000000000000001 [ 90.787588] RDX: 0000000000000001 RSI: ffff8801c1417a00 RDI: 0000000020ffbfff [ 90.787593] RBP: ffff8801c0397590 R08: ffffed0038282f41 R09: ffffed0038282f41 [ 90.787597] R10: 0000000000000001 R11: ffffed0038282f40 R12: 0000000020ffbfff [ 90.787602] R13: ffff8801c1417a00 R14: 00007ffffffff000 R15: 0000000020ffc000 [ 90.787640] ? copyout+0x8a/0xb0 [ 90.787657] _copy_to_iter+0x262/0x13a0 [ 90.787664] ? check_noncircular+0x20/0x20 [ 90.787676] ? copy_overflow+0x20/0x20 [ 90.787693] ? check_stack_object+0x68/0x140 [ 90.787712] ? _copy_from_iter_flushcache+0xf30/0xf30 [ 90.787720] ? __schedule+0x8f3/0x2060 [ 90.787737] ? check_stack_object+0x140/0x140 [ 90.787750] ? __lock_is_held+0xbc/0x140 [ 90.787784] skb_copy_datagram_iter+0x1b6/0xab0 [ 90.787814] ? __sk_queue_drop_skb+0x1d0/0x1d0 [ 90.787825] ? __local_bh_enable_ip+0x121/0x230 [ 90.787839] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.787849] ? lock_sock_nested+0x91/0x110 [ 90.787858] ? trace_hardirqs_on+0xd/0x10 [ 90.787868] ? __local_bh_enable_ip+0x121/0x230 [ 90.787894] tcp_recvmsg+0x123f/0x2620 [ 90.787901] ? lock_downgrade+0x980/0x980 [ 90.787944] ? tcp_recv_timestamp+0x4b0/0x4b0 [ 90.787978] ? __fget+0x362/0x580 [ 90.788002] ? iterate_fd+0x3f0/0x3f0 [ 90.788044] ? perf_trace_lock+0xd6/0x900 [ 90.788052] ? __lock_is_held+0xbc/0x140 [ 90.788063] ? sock_has_perm+0x29c/0x400 [ 90.788089] inet_recvmsg+0x14c/0x5f0 [ 90.788105] ? inet_create+0xf50/0xf50 [ 90.788128] ? selinux_socket_recvmsg+0x36/0x40 [ 90.788138] ? security_socket_recvmsg+0x91/0xc0 [ 90.788152] ? inet_create+0xf50/0xf50 [ 90.788160] sock_recvmsg+0xc9/0x110 [ 90.788181] SYSC_recvfrom+0x2dc/0x570 [ 90.788205] ? SYSC_getpeername+0x460/0x460 [ 90.788216] ? kernel_read+0x120/0x120 [ 90.788227] ? wait_for_completion+0x7b0/0x7b0 [ 90.788277] ? __sb_end_write+0x9e/0xd0 [ 90.788294] ? fput+0xd2/0x140 [ 90.788304] ? SyS_write+0x184/0x220 [ 90.788311] ? lockdep_sys_exit+0x47/0xf0 [ 90.788319] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 90.788331] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.788345] SyS_recvfrom+0x40/0x50 [ 90.788362] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 90.788368] RIP: 0033:0x4529d9 2017/12/02 23:46:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) socket$bt_hci(0x1f, 0x3, 0x1) 2017/12/02 23:46:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) readv(r1, &(0x7f00009f6000-0x50)=[{&(0x7f000038d000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x92}, {&(0x7f00003d2000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f}, {&(0x7f000006e000-0x26)="0000000000000000000000000000000000000000000000000000000000000000000000000000", 0x26}, {&(0x7f000041e000)="000000000000000000000000000000000000000000000000000000000000000000000000", 0x24}, {&(0x7f000082a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf2}], 0x5) [ 90.788373] RSP: 002b:00007fdb666d0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002d [ 90.788381] RAX: ffffffffffffffda RBX: 00007fdb666d0aa0 RCX: 00000000004529d9 [ 90.788385] RDX: 0000000000000002 RSI: 0000000020ffbfff RDI: 0000000000000013 [ 90.788389] RBP: 00007fdb666d0a90 R08: 0000000020ffaff0 R09: 0000000000000010 [ 90.788393] R10: 0000000000000002 R11: 0000000000000212 R12: 00000000004b759b [ 90.788397] R13: 00007fdb666d0bc8 R14: 00000000004b759b R15: 0000000000000000 [ 91.705513] binder: 8475:8481 ioctl c0306201 20004000 returned -22 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="6d643573756d277d2a2600", 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001000-0xc)={0x9, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000b09000)={0x5, 0x6, 0x2, 0xfe2, 0xffffffffffffff2c}) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000b1e000)={0x20000000005, 0xfffffffffffffffd, 0x0}) r4 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x9, 0x10000) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) 2017/12/02 23:46:48 executing program 7 (fault-call:7 fault-nth:2): mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f000043e000)={0x0, 0x0, 0x0}, &(0x7f0000a2c000)=0xc) syz_open_procfs(r0, &(0x7f00006b7000)="6d61705f66696c657300") 2017/12/02 23:46:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000099f000)={0x73, 0x79, 0x7a, 0x2, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00008e7000-0x4)=r2, 0x4) vmsplice(r2, &(0x7f00007a0000)=[{&(0x7f00006dc000-0x1)="24", 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r1, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r4, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r3, &(0x7f0000276000)={0x26, "6861736800000000000000000000", 0x0, 0x0, "736861332d3338342d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r2, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r1, 0x0, r1, 0x0, 0x5ad, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000160000)=0x0) r5 = accept$alg(r3, 0x0, 0x0) close(r5) 2017/12/02 23:46:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") fcntl$setflags(r1, 0x2, 0x1) r2 = add_key$user(&(0x7f0000520000-0x5)="7573657200", &(0x7f0000726000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000f8f000)="78a33e5b304589b32318f0a5cef0e65af194b57fb75a8732f504c6d248abbcdfc1bb4a1aa6cffa40ea82c6764c7a3c332dfcedeefa54d21bd8b8b4631a92e5d1915afe93ace2816f9840964aa6a9ae12d75bb83aa0e98db10241d6c52dd8ff73ceb96b408e503f9a5875ec2103c9cfcb1a7904ab517ffa77c8cf23d572ca49bbf4d267f84019239247ed365216728daed31a99cf1a4c26c22ec9b77469ee640531ad5855c3cfa53611a240b404c5d1d10794e63062fc79c09cba1b1e73a3b2a9f7e1418c3a99a9c1a4f2eafcd32682a9", 0xd0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000b98000)=0x3, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000070a000)={r1, &(0x7f00000a9000-0x4a)="4c95d184bacccfcec78f22a0d080a9097b929b22be9b51e0f47fd309528072d77da63f3b3350a5414ad8ac2e160e898a55bf2b2fa7d510717a252854d70789804553735330ebf652b779", &(0x7f0000b60000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x18) r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000454000)=[{{&(0x7f00002fe000-0x10)=@ipx={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, 0x10, &(0x7f0000eab000-0x10)=[{&(0x7f00002ed000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xca}], 0x1, &(0x7f0000997000-0x51)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5f, 0x8}, 0x3}, {{&(0x7f0000bf9000)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x80, &(0x7f00005d2000-0xa0)=[{&(0x7f0000e53000-0x90)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x90}, {&(0x7f0000eb2000-0x85)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x85}, {&(0x7f00008a0000-0x8a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8a}, {&(0x7f000027a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000055a000-0x17)="0000000000000000000000000000000000000000000000", 0x17}, {&(0x7f0000603000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xca}, {&(0x7f000007e000-0x3b)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3b}, {&(0x7f00004d4000)="0000000000000000000000000000000000000000000000", 0x17}, {&(0x7f0000764000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc1}, {&(0x7f0000859000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7e}], 0xa, &(0x7f0000449000-0x8a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8a, 0xcdb3}, 0xdb42}, {{&(0x7f0000bee000)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000436000-0x20)=[{&(0x7f0000f6b000-0x1)="00", 0x1}, {&(0x7f00008bf000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x2, &(0x7f0000d25000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x7}, 0xc62}, {{&(0x7f0000f6a000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f00000b3000-0x60)=[{&(0x7f0000f5e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xad}, {&(0x7f0000fa1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x37}, {&(0x7f0000b02000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x48}, {&(0x7f0000e12000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000e7e000-0x6b)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b}, {&(0x7f0000e8f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x6, &(0x7f0000016000)="0000000000000000000000000000000000", 0x11, 0x101}, 0x9}, {{0x0, 0x0, &(0x7f00008f6000-0x10)=[{&(0x7f0000524000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x94}], 0x1, &(0x7f000043a000-0xf0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf0, 0x101}, 0x40}, {{&(0x7f00007a5000-0xc)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f00008cd000-0x40)=[{&(0x7f00003c8000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe7}, {&(0x7f0000125000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc0}, {&(0x7f0000aa6000)="", 0x0}, {&(0x7f0000323000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x4, &(0x7f0000e23000)="", 0x0, 0x2}, 0x3}, {{&(0x7f00002b9000)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x80, &(0x7f00003a5000)=[{&(0x7f00005cf000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x1, &(0x7f000000c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7d, 0x5}, 0x3b}, {{&(0x7f0000c31000)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f00001dd000)=[{&(0x7f00002c0000-0x36)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x36}, {&(0x7f00000b9000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8d}, {&(0x7f0000c0c000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3c}, {&(0x7f000041a000-0x17)="0000000000000000000000000000000000000000000000", 0x17}, {&(0x7f00006fa000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000fed000-0x72)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x72}, {&(0x7f0000f32000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd0}, {&(0x7f0000a61000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb8}, {&(0x7f000029f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x58}], 0x9, &(0x7f0000902000)="", 0x0, 0xad7e}, 0x1}], 0x8, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) mmap(&(0x7f0000000000/0xfb8000)=nil, 0xfb8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000439000-0x1c)=[@in6={0xa, 0x2, 0x7fffffff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x81}], 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000923000-0xb)="2f6465762f766373612300", 0x8, 0xc2) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000091000)={@loopback=0x0, @local={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f00007df000)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000eb3000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r1, &(0x7f0000277000)={0x11, 0x10, r3, 0x1, 0x5, 0x6, @random="ecd398ef135b", [0x0, 0x0]}, 0x14) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f000023d000-0x10)={0x7, &(0x7f0000813000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000566000-0x8)={r4, 0x9}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000f19000-0x8)={0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f000023e000-0xc)={0x0, r6, 0x0}) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r6) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000ce1000-0x88)={0x2, {{0xa, 0x1, 0x76c5b4af, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) ioctl$TCSBRK(r1, 0x5409, 0x100000003) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f000003d000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000863000)=0xc) r8 = signalfd4(0xffffffffffffffff, &(0x7f000016b000-0x8)={0x0}, 0x8, 0x80000) fsync(r8) readv(r8, &(0x7f000006f000-0x10)=[{&(0x7f00007c1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x80}], 0x1) open(&(0x7f0000b83000-0x8)="2e2f66696c653000", 0x4000, 0x2000000000005) r9 = syz_open_dev$loop(&(0x7f0000718000-0xb)="2f6465762f6c6f6f702300", 0x6, 0x210000) unshare(0x400) sync_file_range(r8, 0xbc, 0x3ff, 0x0) r10 = signalfd4(r8, &(0x7f0000a9c000-0x8)={0x4}, 0x8, 0x80000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000650000)={0x0, 0x79}, &(0x7f00005d0000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000601000-0x10)={0x1, 0x8, 0x1ff, 0x10001, r11}, &(0x7f00002b2000-0x4)=0x10) fremovexattr(r6, &(0x7f0000fb7000-0xe)=@known="73797374656d2e61647669736500") signalfd(r10, &(0x7f0000519000-0x8)={0xffffdffc}, 0x8) write(r9, &(0x7f00003d1000)="711a6acd1b05e3d30e09d20067f1940b7e6906a6283b4a161b0aa177d743b9f271770f1002ce2feb32c364368dd18286ce587d42a2ea7421ab246359ea685b5ed2c1f56c6b3b3235eb298e1ea64d498ed5222110c318a005c4c2312063b770d357f6a8fbf3e11862e85107878229379911035af4275b14df27f4b6a89accd7ba7443ad3674a1cc61", 0x88) writev(r0, &(0x7f0000d27000-0x10)=[{&(0x7f00005c0000)="290000001800fffd3ffdff00000a05210200e3330008000700feff55080008000000020000e900c000", 0x29}], 0x1) listxattr(&(0x7f00005c7000-0x8)="2e2f66696c653000", &(0x7f0000195000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5b) 2017/12/02 23:46:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:48 executing program 7 (fault-call:7 fault-nth:3): mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VT_ACTIVATE(r0, 0x5606, 0x7ff) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000fa3000+0x123)="00000000") r1 = socket$netlink(0x10, 0x3, 0x800000000001) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f00003bc000-0xf)="6e65742f6970365f6d725f76696600") ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000f79000)={0x20, 0x8, 0x5, 0x2, 0x0}, &(0x7f0000768000)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000a15000-0x14)={r4, 0x9, 0x1, 0x1cdd, 0x1, 0x91}, 0x14) preadv(r3, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) syz_open_dev$vcsa(&(0x7f0000777000-0xb)="2f6465762f766373612300", 0x8cce, 0x20000) 2017/12/02 23:46:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00002fa000-0x4)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000a86000)=@assoc_value={0x0, 0x2}, &(0x7f0000217000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00007b2000-0x10)={0x7, 0x200, 0x10000, 0x17aa3e52, r4}, &(0x7f000066a000)=0x10) ioctl$KVM_SMI(r2, 0xaeb7) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) [ 91.763094] binder: 8544:8548 ERROR: BC_REGISTER_LOOPER called without request [ 91.765989] FAULT_INJECTION: forcing a failure. [ 91.765989] name failslab, interval 1, probability 0, space 0, times 0 [ 91.765999] CPU: 0 PID: 8551 Comm: syz-executor7 Not tainted 4.15.0-rc1-mm1+ #29 [ 91.766007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.766010] Call Trace: [ 91.766023] dump_stack+0x194/0x257 [ 91.766038] ? arch_local_irq_restore+0x53/0x53 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000cff000)={0x0, 0x0, 0x0}, &(0x7f00004fb000-0x4)=0xc) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) [ 91.766069] should_fail+0x8c0/0xa40 [ 91.766086] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 91.766099] ? kmem_cache_alloc+0x12e/0x760 [ 91.766107] ? __anon_vma_prepare+0xbc/0x6b0 [ 91.766114] ? __handle_mm_fault+0x2e5a/0x3e60 [ 91.766120] ? handle_mm_fault+0x38f/0x930 [ 91.766129] ? __do_page_fault+0x5c9/0xc90 [ 91.766135] ? do_page_fault+0xee/0x720 [ 91.766143] ? page_fault+0x2c/0x60 [ 91.766160] ? find_held_lock+0x39/0x1d0 [ 91.766193] ? __lock_is_held+0xbc/0x140 [ 91.766230] ? trace_event_raw_event_sched_switch+0x800/0x800 2017/12/02 23:46:48 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = syz_open_dev$sg(&(0x7f000095c000-0x5)="2f6465762f73672300", 0x80000000, 0x400000) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00003b1000-0x1c)={0x7fff, 0xfff, 0xffff, 0x0, 0x8, 0xfffffffffffffff7, 0x0, 0x1, 0x7, 0x8, 0x1, 0x4, 0x0, 0x1, 0x4, 0x5, 0x9, 0x5, 0xee}) socket$netlink(0x10, 0x3, 0xb) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f000059b000)={0x5, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x5, [{{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @rand_addr=0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x340) r6 = accept$alg(r4, 0x0, 0x0) close(r6) [ 91.766246] ? rcu_note_context_switch+0x710/0x710 [ 91.766272] should_failslab+0xec/0x120 [ 91.766284] kmem_cache_alloc+0x47/0x760 [ 91.766314] __anon_vma_prepare+0x39d/0x6b0 [ 91.766326] ? do_raw_spin_trylock+0x190/0x190 [ 91.766335] ? anon_vma_fork+0x870/0x870 [ 91.766342] ? lockdep_init_map+0x3d/0x70 [ 91.766365] ? _raw_spin_unlock+0x22/0x30 [ 91.766375] ? __pte_alloc+0x1cb/0x310 [ 91.766392] __handle_mm_fault+0x2e5a/0x3e60 [ 91.766399] ? check_noncircular+0x20/0x20 [ 91.766418] ? __pmd_alloc+0x4e0/0x4e0 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f000073f000)=0x0) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000fc2000-0xe)="6e000000000008000000740700") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0xfffffffffffffffa, 0x2000000000000000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 91.766429] ? find_held_lock+0x39/0x1d0 [ 91.766460] ? lock_downgrade+0x980/0x980 [ 91.766470] ? __lock_is_held+0xbc/0x140 [ 91.766533] handle_mm_fault+0x38f/0x930 [ 91.766540] ? down_read_trylock+0xdb/0x170 [ 91.766553] ? __handle_mm_fault+0x3e60/0x3e60 [ 91.766560] ? vmacache_find+0x5f/0x280 [ 91.766568] ? vmacache_update+0xfe/0x130 [ 91.766583] ? find_vma+0x30/0x150 [ 91.766600] __do_page_fault+0x5c9/0xc90 [ 91.766612] ? trace_event_raw_event_lock+0x340/0x340 [ 91.766635] ? mm_fault_error+0x2c0/0x2c0 [ 91.766667] do_page_fault+0xee/0x720 [ 91.766681] ? __do_page_fault+0xc90/0xc90 [ 91.766698] ? find_held_lock+0x39/0x1d0 [ 91.766738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 91.766764] page_fault+0x2c/0x60 [ 91.766774] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 91.766779] RSP: 0018:ffff8801bfe9f560 EFLAGS: 00010202 [ 91.766786] RAX: ffffed00386b8800 RBX: 0000000000000001 RCX: 0000000000000001 [ 91.766791] RDX: 0000000000000001 RSI: ffff8801c35c42c0 RDI: 0000000020ffbfff [ 91.766796] RBP: ffff8801bfe9f590 R08: ffffed00386b8859 R09: ffffed00386b8859 [ 91.766801] R10: 0000000000000001 R11: ffffed00386b8858 R12: 0000000020ffbfff [ 91.766805] R13: ffff8801c35c42c0 R14: 00007ffffffff000 R15: 0000000020ffc000 [ 91.766845] ? copyout+0x8a/0xb0 [ 91.766861] _copy_to_iter+0x262/0x13a0 [ 91.766868] ? check_noncircular+0x20/0x20 [ 91.766892] ? check_stack_object+0x68/0x140 [ 91.766910] ? _copy_from_iter_flushcache+0xf30/0xf30 [ 91.766929] ? check_stack_object+0x140/0x140 [ 91.766941] ? __lock_is_held+0xbc/0x140 [ 91.766978] skb_copy_datagram_iter+0x1b6/0xab0 [ 91.767010] ? __sk_queue_drop_skb+0x1d0/0x1d0 [ 91.767020] ? __local_bh_enable_ip+0x121/0x230 [ 91.767033] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 91.767042] ? lock_sock_nested+0x91/0x110 [ 91.767050] ? trace_hardirqs_on+0xd/0x10 [ 91.767059] ? __local_bh_enable_ip+0x121/0x230 [ 91.767083] tcp_recvmsg+0x123f/0x2620 [ 91.767090] ? lock_downgrade+0x980/0x980 [ 91.767133] ? tcp_recv_timestamp+0x4b0/0x4b0 [ 91.767166] ? __fget+0x362/0x580 [ 91.767192] ? iterate_fd+0x3f0/0x3f0 [ 91.767231] ? perf_trace_lock+0xd6/0x900 [ 91.767239] ? __lock_is_held+0xbc/0x140 [ 91.767250] ? sock_has_perm+0x29c/0x400 [ 91.767277] inet_recvmsg+0x14c/0x5f0 [ 91.767296] ? inet_create+0xf50/0xf50 [ 91.767309] ? iterate_fd+0x3f0/0x3f0 [ 91.767326] ? selinux_socket_recvmsg+0x36/0x40 [ 91.767336] ? security_socket_recvmsg+0x91/0xc0 [ 91.767352] ? inet_create+0xf50/0xf50 [ 91.767361] sock_recvmsg+0xc9/0x110 [ 91.767368] ? sockfd_lookup_light+0x104/0x150 [ 91.767384] SYSC_recvfrom+0x2dc/0x570 [ 91.767405] ? SYSC_getpeername+0x460/0x460 [ 91.767416] ? kernel_read+0x120/0x120 [ 91.767428] ? wait_for_completion+0x7b0/0x7b0 [ 91.767484] ? __sb_end_write+0x9e/0xd0 [ 91.767503] ? fput+0xd2/0x140 [ 91.767514] ? SyS_write+0x184/0x220 [ 91.767521] ? lockdep_sys_exit+0x47/0xf0 [ 91.767529] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 91.767543] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 91.767559] SyS_recvfrom+0x40/0x50 [ 91.767577] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 91.767583] RIP: 0033:0x4529d9 [ 91.767587] RSP: 002b:00007fdb666d0c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002d [ 91.767596] RAX: ffffffffffffffda RBX: 00007fdb666d0aa0 RCX: 00000000004529d9 [ 91.767600] RDX: 0000000000000002 RSI: 0000000020ffbfff RDI: 0000000000000013 [ 91.767605] RBP: 00007fdb666d0a90 R08: 0000000020ffaff0 R09: 0000000000000010 [ 91.767614] R10: 0000000000000002 R11: 0000000000000212 R12: 00000000004b759b [ 91.767618] R13: 00007fdb666d0bc8 R14: 00000000004b759b R15: 0000000000000000 2017/12/02 23:46:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000e27000)="2f6465762f73672300", 0xffffffff00000001, 0xa00) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet6(r0, &(0x7f000044e000-0x1c)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f000087a000)=0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 2017/12/02 23:46:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a1, &(0x7f0000e97000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x86dd, @ipv6={0x0, 0x6, "43f0ca", 0x26b, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x7, [0x0, 0x0, 0x0], {0x3, 0x6, "c8854e", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, [@dstopts={0x32, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x7, 0x0, ""}]}, @routing={0x3f, 0x0, 0x3, 0x4, 0x1, []}, @dstopts={0x0, 0x25, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x5, 0x38, "93c80381ae7f0eea12e76b1fbe8538249e3c86feb5640ae80237b2e45ca802c19b92703b399bcc2c5a6704eb66e3c951ade8eae50a22a692"}, {0xff, 0x1c, "7a1f469a6db7e91fae9b7e25dd766cc10a7cc62e5e0528959282a28b"}, {0x7, 0xd5, "1a28dc7b591a28737897ab4e6bed8c64ee3a54f5b3ee25b8904f007feda15c1a8c0fef5dd8e0c902ff53fd42af9348e7ac7483ab316e1a9216876cb6ec971d1e68e056628ca430775f972a6f57c23b806ceaf2e74cecea4d6573de06094ceb690a4c11238f6714c20bdc737013b3a733b1ccce54e05fe14221853c077aeb84b83394794e466ee9c8454f8783d3233e8fba72e71e6973d5f6f247d28a43234c0213b300d67a8326ed17ec4d545386d40839e42d1b4a7e07b68219998c2101f644a26fae30d04700be3d56d7ae6bf0904d5018ed764d"}]}, @routing={0x0, 0x4, 0x1, 0x8004, 0x80000000, [@loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}]}], "74a714450198ebfd8737b42f1c3217db042e46cdbc64b330e996c7c40b6484c2a75f51f5549d5ed10c843e7020a4f3dc0fe9e5d33663f96a6726bce2461120a1e3ebb4a394a889e83f8fa6aafc00ae2cd968723446a1212eb424655c9effa96a0b87c2c7fd10e80689a867c37fe2ba8d28ef22ceb53a693ed6eace2de266cf95f6ce874c93e09ff0f11471d438c551ba819dee49b6646cdb22a37b95e540081ab435059c121b80621bd859d5b62fff70e08bff7e3b2ab291c25d4201b57667dbdc61cb9733cab3052315"}}}}}}}, 0x0) r0 = gettid() perf_event_open(&(0x7f0000934000-0x78)={0x2, 0x78, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x18000000000, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc56b, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000e2d000-0x78)={0x2, 0x78, 0xd4e7, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x200000000, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000c39000-0x144e)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x20086dd, @ipv6={0x0, 0x6, "a228af", 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @udp={0x0, 0x0, 0x8, 0x0, ""}}}}}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00009f2000)="2e2f66696c653000", 0x43, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1000000000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xa00000002, 0x0, 0x80000001, 0x3, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x400000, r2, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000887000)=0x0, &(0x7f0000aa6000)=0x4) fanotify_mark(r2, 0x1, 0x0, r2, &(0x7f0000266000)="2e2f66696c653000") mount(&(0x7f0000144000)="2e2f66696c653000", &(0x7f00009f7000-0x8)="2e2f66696c653000", &(0x7f000057c000-0x4)="6e667300", 0x0, &(0x7f000000a000)="") openat$sequencer(0xffffffffffffff9c, &(0x7f0000938000-0xf)="2f6465762f73657175656e63657200", 0x4002, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000edc000)=@get={0x1, &(0x7f0000f2b000-0xc6)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2}) write(r3, &(0x7f0000e95000-0x10)="020a7c0202000000090500d91dfb3700", 0x10) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000eac000)=0x0) getsockname$inet(r3, &(0x7f00001d2000-0x10)={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000038a000)=0x10) sendmsg$unix(r1, &(0x7f0000001000-0x38)={&(0x7f00006c6000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000890000)=[], 0x0, &(0x7f0000001000-0x10)=[], 0x0, 0x4000}, 0x4080) recvmmsg(r2, &(0x7f0000350000)=[{{&(0x7f0000d98000)=@in={0x0, 0x0, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000540000-0x60)=[{&(0x7f0000d5c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc8}, {&(0x7f000040e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe4}, {&(0x7f0000468000-0x68)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f000063c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3b}, {&(0x7f00009d0000-0x37)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x37}, {&(0x7f0000eb8000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x6, &(0x7f00003e3000-0x8b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8b, 0x0}, 0x0}, {{0x0, 0x0, &(0x7f00000a8000-0x20)=[{&(0x7f00001e1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x35}, {&(0x7f0000a77000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x47}, {&(0x7f0000d9f000-0x57)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x57}, {&(0x7f0000c18000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6e}], 0x4, &(0x7f0000f5d000-0x72)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x72, 0x7f}, 0x2}, {{&(0x7f0000f03000)=@ax25={0x0, {"00000000000000"}, 0x0}, 0x10, &(0x7f0000c10000-0x40)=[{&(0x7f0000454000-0xd7)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd7}, {&(0x7f0000d0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfa}, {&(0x7f0000724000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2e}, {&(0x7f00001e7000-0x2d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2d}], 0x4, &(0x7f00007bf000-0x73)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x73, 0x7}, 0x8bc5}, {{&(0x7f000067f000)=@nl={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000735000)=[{&(0x7f0000394000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f00003e0000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcf}, {&(0x7f0000122000-0x2b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b}, {&(0x7f0000583000-0xb9)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb9}, {&(0x7f0000a7c000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xac}, {&(0x7f000009a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x6, &(0x7f0000d6d000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd1, 0x800000009}, 0x4}], 0x4, 0x40000000000001, 0x0) 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00002f9000-0x4)=0x0) r1 = syz_open_dev$loop(&(0x7f0000718000-0xb)="2f6465762f6c6f6f702300", 0x5, 0x2) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f000083a000)="55a129240ab8d68e61d56582d3b7f92e7cf6eead19567668e71dfcc4279d8f0c85532058d155c7f3aaaa8cb8e265c0ad60327f90d1db8c56b0037355519562993ceb3e790fef0c29e5a970db2b97bb58533612a562024cde88d8103a2286bf5a8823373a556c", 0x66) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000822000-0xc)={0x20000000, 0x0}) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000742000-0x20)={"48abf5b09a8ef7d601aa411a27475550", {0x4, 0x9, 0xfffffffffffffffd, "782874272c40", 0x7, 0x0}}) 2017/12/02 23:46:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r1 = syz_open_procfs(0x0, &(0x7f0000c80000-0x8)="656e7669726f6e00") ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000cf3000)={0x6, 0x5, 0xe0a6}) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00008ba000-0x4)=0x81) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f000096a000)={0x4b8a, 0x7fffffff, 0xffffffffffffdea9, 0x0}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00006f3000-0x10)={0x0, 0x0}, &(0x7f0000f16000)=0x10) 2017/12/02 23:46:48 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ff7000)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000065a000)="4a6d72667d776f7081b40300ff107200dd") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00000c7000/0x3000)=nil, 0x3000, 0x2000005, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000237000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c58000)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000bd1000-0x14)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, r5}, 0x14) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00001ec000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f84000-0x4)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r7, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r6, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r8 = accept$alg(r6, 0x0, 0x0) close(r8) [ 92.260346] binder: 8544:8548 BC_INCREFS_DONE u0000000080000000 no match [ 92.260351] binder: 8544:8548 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:48 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) timer_create(0x1, &(0x7f0000b74000)={0x0, 0x8, 0x2, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000c4c000-0x4)=0x0) timer_getoverrun(r1) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = semget(0x3, 0x4, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000ff8000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") clock_gettime(0x0, &(0x7f0000ff7000)={0x0, 0x0}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x6d1e5ce8ca28f8eb, &(0x7f0000ff8000-0x20)={{0x0, 0x1c9c380}, {r3, r4+30000000}}, &(0x7f0000ff7000)={{0x0, 0x0}, {0x0, 0x0}}) 2017/12/02 23:46:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) listxattr(&(0x7f0000a89000-0x8)="2e2f66696c653000", &(0x7f000095e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdb) 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 2017/12/02 23:46:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) timer_create(0x3, &(0x7f00001f3000-0x60)={0x0, 0x3f, 0x4, @thr={&(0x7f0000473000+0xe28)="2595cc3a69787235cf99897c8f1500b466bda1024bc8f0b224496bffeeac4267fdcbbf163834bf2694bf5970143d6249d2e0a98c33bef41f442f36ebd9a9c15712a8db80c699a2b4b99d401df81edd29876e20e4597dfbd181fffe9f5ee125d19c3a97462f46a2fced936edafd27766d04d8b9e8b03e94b3753bd3ada5bfa38ee9bb47d6358bf2b8384adc57384dbdaaa60cfc69c5fa4ce286090917001bb455273dfb47c932afcbf2b984ccdec751cf50c17c77487ac5dce908d8d68bf82b3aaf0d7e41a332e7311536df154526c1815d466b06e6e633629b015bd2b7a2b2439813", &(0x7f0000466000)="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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000b10000)=0x0) timer_delete(r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) read(r0, &(0x7f0000c69000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) [ 92.334356] rpcbind: RPC call returned error 22 2017/12/02 23:46:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000e6f000)={0x1, 0x0, &(0x7f000060c000)="d8d193a9816b73a1d4c3a088e3649dc816eac3b29a3df5e227bb1460823412c0d5aea8d712e9677b48297ca9264e1b4a605ece32931a", &(0x7f0000ed3000-0x88)="17a9a70e7db4acc856ca90607312faeecef62df8d8e9f8a7a692c6b8c778283f1451a094c28af30a6e8187d5fe6f709ae6d09a74618bd719f5de90ab8305c753c85bca108c99578ed9556f36a4e27de21db61e208110f928000d7c855a39defc469d723206e9a70c4b42d424d986f49942585ea9d58aeb4f1ec570da1807112d64cbf17124bdb432", 0x36, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) r3 = request_key(&(0x7f0000b4e000-0x6)="727872706300", &(0x7f0000502000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000e93000-0x1)="00", 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r3, 0x2) 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000e28000)="2f6465762f6c6f6f702300", 0x200000080000, 0x800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$int_out(r0, 0x5462, &(0x7f0000c7c000-0x8)=0x0) 2017/12/02 23:46:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[], 0x0, 0x45) [ 92.383632] binder: 8628:8635 ERROR: BC_REGISTER_LOOPER called without request [ 92.391138] binder: 8628:8635 BC_INCREFS_DONE u0000000080000000 no match [ 92.406728] rpcbind: RPC call returned error 22 2017/12/02 23:46:48 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)="2f6465762f696e7075742f6d69636500", 0x0, 0x10800) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00007fa000-0x8)={0x0, 0x5}, &(0x7f00001eb000-0x4)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000970000)={r1, 0x8d}, &(0x7f0000454000-0x4)=0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000436000-0x58)={0x26, "736b636970686572000000000000", 0x0, 0x8f, "7874732873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000052000)="", 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f000059f000-0x38)=[{0x0, 0x0, &(0x7f00001de000)=[{&(0x7f0000103000-0x1000)="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", 0xf14}, {&(0x7f0000c35000)="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", 0x1000}], 0x2, &(0x7f0000b6a000)=[@assoc={0x18, 0x117, 0x4, 0xa43d}, @assoc={0x18, 0x117, 0x4, 0xe1a7}], 0x30, 0x80}], 0x1, 0x80) recvmsg(r3, &(0x7f0000201000)={&(0x7f0000aa6000-0x10)=@ax25={0x0, {"00000000000000"}, 0x0}, 0x10, &(0x7f0000cf4000-0x80)=[{&(0x7f0000d5d000)="", 0x0}, {&(0x7f00005ca000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000f5e000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00000b0000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f00002a8000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000c4a000-0xcb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcb}, {&(0x7f0000d08000-0xdb)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdb}], 0x7, &(0x7f000037a000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x66, 0xfffffffffffffffe}, 0x40008020) 2017/12/02 23:46:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000c8d000-0x4)=0x1, &(0x7f0000294000-0x4)=0x4) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r0, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) 2017/12/02 23:46:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00005fb000)="2f6465762f72746300", 0x40000, 0x0) r1 = creat(&(0x7f000068e000)="2e2f66696c653000", 0x4) r2 = openat(r1, &(0x7f0000e2c000+0xcd1)="2e2f66696c653000", 0x1, 0x100) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000c73000-0x20)={0x35, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000b7e000)="6e0000000574455f737461007300") r5 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, &(0x7f0000eac000)=0xffffffff00000001) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f000016b000)={0x10d000, 0x100000, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000c1a000-0xc)={0x2, [0x0, 0x0]}, &(0x7f00006f1000-0x4)=0xc) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000870000-0x98)={0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x11, 0x8, "713a3ff5b4acd1f8efbd1194d288bdeb8f5c2fda0f2ab554f6b6627b46bdf7ae4b94cdd71b7c50c04621419ff0be8549e5a60870c6756434d32b2d6d094094cc", "b1e791dfe798f2941e86d10b83a90ad6fd11eec83502fd2047a2acc2c6daf993", [0x7f, 0x0], 0x0}) capset(&(0x7f0000bbf000-0x8)={0x20080522, r3}, &(0x7f000087d000)={0x35dfd817, 0x6, 0x3, 0x4, 0x81, 0x7fffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) sched_getscheduler(r3) 2017/12/02 23:46:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000ad000)="2f6465762f766373612300", 0x3, 0x8000020000) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00008d0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000448000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r1, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x2, &(0x7f0000bd2000-0xd0)={0x0, 0xc78b, 0xd94, 0x3, 0x8, 0x4, 0x3, 0x37b, 0x6, 0x8, 0x7fffffff, 0x2d3, 0x362, 0x2, 0xdf1f, 0xffff, 0x67f4, 0x9b, 0x35d4, 0x8, 0x2, 0x2f53, 0x4, 0x9, 0x10000, 0x5d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") clock_gettime(0x0, &(0x7f0000392000-0x10)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000f0a000-0x10)={r1, r2+30000000}) r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00001ef000)=0x8, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000a31000-0x20)={@common="6c6f0000000000000000000000000000", @ifru_addrs={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 2017/12/02 23:46:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$netrom(0xffffffffffffff9c, 0x0, &(0x7f000026d000)=0x0) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f00004e4000-0x4)=0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) gettid() getpgrp(0x0) getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00007a3000)=0x0) syz_open_procfs(r2, &(0x7f0000787000-0xe)="6e65742f6465765f736e6d703600") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) 2017/12/02 23:46:48 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000ff7000)="2f6465762f72666b696c6c00", 0x4c80, 0x0) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000914000+0x8c8)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) fcntl$dupfd(r0, 0x0, r0) [ 92.430488] binder: 8628:8635 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 92.447494] binder: 8628:8648 ERROR: BC_REGISTER_LOOPER called without request [ 92.454967] binder: 8628:8648 BC_INCREFS_DONE u0000000080000000 no match [ 92.462426] binder: 8628:8648 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000053d000-0x8)="2e2f66696c653000", 0x80000, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000c15000-0x8)={0x0, 0x3}, &(0x7f0000125000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000877000)={r1, 0x5, 0x30}, &(0x7f0000f10000-0x4)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) connect$unix(r0, &(0x7f00002c1000)=@file={0x1, "2e2f66696c653000"}, 0xa) lgetxattr(&(0x7f0000b92000-0x8)="2e2f66696c653000", &(0x7f0000133000)=@random={"62747266732e00", "707070316367726f7570766d6e6574305c00"}, &(0x7f0000356000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc1) 2017/12/02 23:46:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x2, 0x400000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa, 0x0, 0x0}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r1, &(0x7f000001a000-0x10)={0x0, 0x0, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000001a000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000019000)=@generic={0x0, 0x100000001, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013000)=0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000019000)={0x0, 0xffffffffffffffe1, 0x9, 0x526, 0xfffffffffffffffb, 0x81}, &(0x7f0000001000-0x4)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f000001a000-0x68)=[@in6={0xa, 0x3, 0xe9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x40, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8000}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x68) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x8000000000008530, 0x8002, 0x8, 0x4, r3}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000020000-0x4)=0x0, &(0x7f0000001000-0x4)=0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f70746d7800", 0x2, 0x0) syz_open_pts(r5, 0x1fffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001000-0x4)=0x0, &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000019000)=@assoc_value={r3, 0x81}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000004000-0x8)={r4, 0x800000}, &(0x7f0000000000)=0x8) 2017/12/02 23:46:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00004cd000)={0x7, 0x9, 0x4, 0x0, 0xffffffffffffffe1, 0x100}) r1 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r1, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:48 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000128000)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000ff7000)="2f6465762f7161745f6164665f63746c00", 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00008d0000-0x4)=0x80000001, 0x4) [ 92.529432] binder: 8663:8669 ERROR: BC_REGISTER_LOOPER called without request [ 92.536913] binder: 8663:8669 BC_INCREFS_DONE u0000000080000000 no match [ 92.544623] binder: 8663:8669 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000f10000-0x6)={0x19980330, 0x0}, &(0x7f00008e7000)={0x0, 0x27d, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000697000-0x78)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00007ca000-0xa)="2f6465762f7663732300", 0x26ae, 0x12003) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x45, 0x100000002, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f000048c000-0x8)=0xffff) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000b33000/0x1000)=nil) shmget(0x2, 0x2000, 0x400, &(0x7f000089d000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x180, &(0x7f0000bac000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) clock_gettime(0x3, &(0x7f0000007000)={0x0, 0x0}) setitimer(0x4, &(0x7f00003d8000)={{r3, r4/1000+10000}, {0x77359400, 0x0}}, &(0x7f0000660000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) r5 = signalfd(0xffffffffffffff9c, &(0x7f00000c3000)={0x53}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000829000-0x4)=0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00004ca000-0x8)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000dcc000-0xe8)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000093b000)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003000-0x188)=[{&(0x7f0000003000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000002000-0x40)=[{&(0x7f0000000000)="2a993442f9f2ca1e3a32a9ed2877005cbb1a58e4d1fa157fcb8d526dbffbe1bdc25d08ffb91135380589f5fda14630ae8f47a23c9aa9d673541142d1035ea8706a3b9afcf848bb2cdf90be5d2901d9012cf5ae2953bcb5dcea1f541e1721b2c1819e45af02493886f645cfba59bac466c4fc7a6419fd8e61d59c1992ece607c8fd0ed44ee40abc94b6136f7b9a5f9e973786c8a28a42f1245f0f9a7c438519bdd180546f568b6a855febdced7abbc0869347baaba1ef708e0c02a2c28c7b333d08929a685fb5ea92f00b23f3be0c83ab6ebb72f9fefb9f6c893c65bff2fb32f99ea7e29725bced0a4d161f942fd6164f", 0xf0}, {&(0x7f0000001000-0x86)="66e821142d5cd73990654e3973ba5d156ab08b92edab0003d86890b9c33e7ee4f79e64d32fab88781f686ab7d7b5c58556db1b0f1a5084fb05cde128467bb62372e6ea5209a9cf5dde4d4307493d487ce2d8bcb71cf1fa063ceb10ee2c02f436fcc089eeda14dca01ee180415972440327b17a0aeb3a597f89703d5e5150c007309c5ec55e96", 0x86}], 0x2, &(0x7f0000a77000)=[@cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x30, 0x1, 0x1, [r5, r1, r7, r1, r5, r5, r1]}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x7, 0x20000044}, {&(0x7f0000002000)=@file={0x1, "2f"}, 0x3, &(0x7f0000003000-0x80)=[{&(0x7f0000003000-0xd7)="62c683153f9a09316851675d0c2f041571694bcc738160bf278ca3f1fadba5ab84890c737a09f3f8cfe7335d7ba8d949ffe994b3e2826fc2cbc9652794e223571140f14aac2cbc558617a23b79899738575862044b62f73864af99e98e608c8d1c64159c0369dd54d3d25e809181ab49ca3e0d4a1442ac6c6325865eb0638a5ae34fb72affc44406c58bb03fe86c5482e328bfd05677317a4d9001e65286d373bdd7a061d7ebd25842a29460943d1b1378879a4dfa32a6214ea4e50d7d665ea37081a878ba2db6adf28512ad53da76d1c0ce6c881dff72", 0xd7}, {&(0x7f00006a3000)="9c21ae0707e185a39456a680d7840057b5414985cf6314b6d80efce9eec0810cb4c2ba5e6bb675fdfc56ee75a07623ac7b10f0b7e0111f3b3a66c009048001e5c5adfae848e13bb900c8336c0af9bdfdc6d08f74a38462d5df5d7f8142dab9acd331c67a0e269ff811b00d018cc1c817a610328297719631f2bf748e6419809edeba6fd5de22b6b843b8ec3fdad024ae52", 0x91}, {&(0x7f0000003000-0xd9)="3ed95dabc9d4fb520347c01ab411473434b07ec51c9492d62c1bb86b51afbaf888ef6ebd784f36d0b55e1ccdce1e1da9543c2403e0cac6067e7cc83556e0b75c5e7ae7939da1e573c366156f52840693f44287c2e5635244de57401a63eae8d8f33d22c489ffce654c12601a2ffc6ac6a8b21f5e97c363dd97295cd7781b9d44e86af753e1be80ef6b4d92ae0d0a365b79947d5ea793abcb7055552b58730d230bef7430a04d1e2346c67288960c7d72fc7df87dbf3e6221abf0bb12fd6a852fbf29e19c7f8b355dfc623b1bf7499d3734a671d4a3340bad6b", 0xd9}, {&(0x7f0000062000-0x49)="ac98e6bc3fbc4f3955a3cabe7477c7a69659e2888bf497dc62fe5e491b2a98e97f7bf813060669ed78c86cd70c24d4b0a3c03daae2a5da64ca1dbcbfc54d05baf46e346c77d0825d23", 0x49}], 0x4, &(0x7f0000003000-0x150)=[@cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @rights={0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x10, 0x1, 0x1, []}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, r6, r8, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}, @rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x9, 0x4}, {&(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000003000-0x60)=[], 0x0, &(0x7f0000002000-0x20)=[@cred={0x20, 0x1, 0x2, 0x0, 0x0, 0x0}], 0x1, 0x80}], 0x3, 0x10) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f000023d000)="2f6465762f6877726e6700", 0x24001, 0x0) accept4$unix(r9, 0x0, &(0x7f0000346000-0x4)=0x0, 0x800) r10 = syz_open_dev$vcsn(&(0x7f0000000000)="2f6465762f7663732300", 0x5, 0x200) socket(0x2, 0x800, 0xff) r11 = msgget$private(0x0, 0x10) msgrcv(r11, &(0x7f0000417000)={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0xa7, 0x0, 0x1802) mkdir(&(0x7f0000014000)="2e2f66696c653000", 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)="2e2f66696c653000", 0x0, 0x1fffffffffffffc) symlinkat(&(0x7f0000c1c000-0x1)="2f", r12, &(0x7f0000d07000-0x8)="2e2f66696c653000") linkat(r10, &(0x7f00003af000)="2e2f66696c653000", r9, &(0x7f0000e8a000-0xe)="2f", 0x400) clock_gettime(0x0, &(0x7f0000a56000-0x10)={0x0, 0x0}) 2017/12/02 23:46:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f00004dd000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000229000)={r2, &(0x7f000086d000)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f48ef254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00008bf000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r1, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) 2017/12/02 23:46:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000081d000-0x9)="2f6465762f72746300", 0x80002, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000dd5000)={0x40, @tick=0x7, 0x101, {0x7f, 0x2}, 0x3f, 0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:48 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)="2e2f66696c653000", 0x40000, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000001000-0x10)={&(0x7f0000893000/0x3000)=nil, 0x3000}) 2017/12/02 23:46:48 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000ff7000)={0x0, 0x0}) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000b22000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000ff7000)=0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f0000e6e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") sendto$inet(r1, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000ff9000-0x2)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00007ff000)="2f6465762f72746300", 0x200, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000ff8000-0x4)={0x2}, 0x4) 2017/12/02 23:46:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$TIOCGSID(r3, 0x540f, &(0x7f0000bfc000)=0x0) timer_create(0x7, &(0x7f0000676000-0x60)={0x0, 0x35, 0x1, @tid=r6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000303000-0x4)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) setsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000598000-0x8)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r7, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000097a000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000de6000-0x4)=0xc) ptrace$getregs(0xe, r8, 0x1, &(0x7f00007d1000-0x18)="000000000000000000000000000000000000000000000000") ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00004dd000)={@common="69726c616e3000000000000000000000", @ifru_flags=0x802}) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000e02000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r9 = accept$alg(r5, 0x0, 0x0) close(r9) 2017/12/02 23:46:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000772000)="2f6465762f72666b696c6c00", 0x10041, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f000014f000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r2 = syz_open_dev$vcsn(&(0x7f0000b63000-0xa)="2f6465762f7663732300", 0x8, 0x220300) getsockopt$nfc_llcp(r2, 0x118, 0x2, &(0x7f0000c78000-0xb0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb0) [ 92.590802] binder: 8663:8669 ERROR: BC_REGISTER_LOOPER called without request [ 92.598292] binder: 8663:8669 BC_INCREFS_DONE u0000000080000000 no match [ 92.630140] binder: 8663:8669 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0xfffffffffffffffd, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000b20000-0xf)="6e65742f6970365f6d725f76696600") openat$vcs(0xffffffffffffff9c, &(0x7f0000859000-0x9)="2f6465762f76637300", 0x0, 0x0) preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000550000)="6e65742f707479706500") mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00007da000)="2f6465762f73657175656e6365723200", 0x2000, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000ff7000)={0xffffffffffffffff, 0x80000001, 0x0, "42dbbcb49a64894725ed7c7363875426b923be28cdc755e2bc90c1013e84dc3f47fe27c264c22bfa8243cda790d39d00f387d98dc3798c5db9bb7f88b09f7c591188ba9f3bc4ea9733197e5a8ae875e73ce81e3ca491417d8f030656b37fa966c37a86a7a97c49d77e598acde1c61f09b1822ff38e3dfa5d0e89be5b3c4f"}) sendto$inet(0xffffffffffffffff, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 92.683337] binder: 8709:8711 ERROR: BC_REGISTER_LOOPER called without request [ 92.690851] binder: 8709:8711 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00005c9000-0x4)=0x0) waitid(0x2, r2, 0x0, 0x1000006, &(0x7f0000b6a000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) write(r3, &(0x7f0000fde000)="1a42c499035f943737823ed32d5571343fc187bfef19488edd59074c84b82e5d7b5be8d64c623cc637b3c68b467b730b87111dc792a9e56b93fce1e2420397d20b88dc575bd49d8bba97359d3f96e3463812ccb32297f09e51f747", 0x5b) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000d23000-0x30)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r7 = accept$alg(r5, 0x0, 0x0) close(r7) [ 92.753315] binder: 8709:8722 ERROR: BC_REGISTER_LOOPER called without request [ 92.753330] binder: 8709:8722 BC_INCREFS_DONE u0000000080000000 no match [ 92.753336] binder: 8709:8722 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 92.791473] binder: 8709:8711 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000bba000-0x4)=0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2017/12/02 23:46:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$TCSBRK(r0, 0x5409, 0x482802f6) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000800, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0xdf8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f000060d000)="2f6465762f6175746f667300", 0x100, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000e87000)={0x0, 0x10000, 0x1, 0x400}) 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0xfffffffffffffffe, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000cfe000-0x4)={0x9, 0x1, 0x7}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x203, &(0x7f0000640000-0x10)={&(0x7f0000f90000-0x4c)="bf03760488890cf9a10bffa1c516cc2991f7d142967b4f5012038d92a5673fe71751a914be59efabe5d03f3be3448e4c780a4b3fa11a909e4c4eee8de8be97a464aa2c651d85f4d67d6b1a2c", 0x4c}) syz_open_dev$binder(&(0x7f00005fa000-0xd)="2f6465762f62696e6465722300", 0x0, 0x1) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f000042e000)={0x2, [0xfffffffffffff001, 0x1d09]}, 0x8) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) r5 = fcntl$getown(r2, 0x9) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000bd2000)={{0x9, 0x6, 0x8, 0x3, 0x123, 0x2}, 0xc78}) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00001bc000)=0x8, 0x4) ioprio_set$pid(0x1, r5, 0x4) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000cb8000)={0x0, 0x0}, &(0x7f0000cfa000-0x4)=0x10) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f0000849000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x8, r7, 0x1, 0x80000001, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r6, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) fcntl$getflags(r1, 0x401) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) timer_create(0x2, &(0x7f00005bb000-0x60)={0x0, 0x2d, 0x4, @thr={&(0x7f0000110000-0x17)="9e41cc8a11ff4a654ccd3c550bbe9e876d4407d180cffd", &(0x7f00001eb000-0x41)="d38a69182bedb390037ab18580c7ca766f6a5ae796c1f345c38192d962d21eac0ee8d894992e876e3229fd2dc3658c4acc51f1b09727e6de98851c860777fe3814"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000ed2000-0x4)=0x0) setreuid(r8, r8) timer_settime(r9, 0x0, &(0x7f0000f63000-0x20)={{0x0, 0x0}, {0x0, 0x1c9c380}}, &(0x7f0000140000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000db8000)=0x0, &(0x7f000048a000-0x4)=0x4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r10 = accept$alg(r6, 0x0, 0x0) close(r10) 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f000075b000)={0x6, r0, 0x1}) preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00001fc000-0x9)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x400000000000007f, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000002000+0x901)="64657620", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000187000-0x1)="76", 0x1) mmap(&(0x7f0000000000/0xfc3000)=nil, 0xfc3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000dcc000-0x78)={0x8, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x85, 0x5, 0x2, 0x6, 0x7fffffff, &(0x7f00006d6000)=@common="6c6f0000000000000000000000000000", 0x4, 0xfffffffffffffff9, 0x8}) writev(r1, &(0x7f00004ab000-0x10)=[{&(0x7f0000fb3000)="290000001800ffffffffffffff000002021300000000ff06800800000d0009000900001900000000f6", 0x29}], 0x1) mmap(&(0x7f0000fc3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept(r2, &(0x7f0000aae000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000fc4000-0x4)=0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000263000-0x4)=0x0) socket$bt_hci(0x1f, 0x3, 0x1) getpid() sendfile(r0, r0, &(0x7f0000001000)=0x0, 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000004, 0x11, r0, 0x0) setns(r0, 0xc000000) rename(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000)="2e2f66696c653000") mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000001000)="64657620") 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x3) openat$autofs(0xffffffffffffff9c, &(0x7f0000bb0000-0xc)="2f6465762f6175746f667300", 0x282040, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00003ee000)="6174747200") socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00002bd000-0x8)={0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000d59000)="2f6465762f76637300", 0x20000, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000fd7000)={0x0, r0, 0x0}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00008b0000-0x8)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000173000-0x4c)=[@in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x400, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x669, @loopback={0x0, 0x1}, 0x3ff}], 0x4c) r3 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r3, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) r1 = syz_open_dev$vcsa(&(0x7f00009f3000)="2f6465762f766373612300", 0xffffffffffffff81, 0x6000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000ba5000-0x8c)={0xc323, 0x1000, 0x3, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = msgget$private(0x0, 0x40) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000f1a000-0x92)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000f27000)={0x4aca, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 92.858863] binder: 8759:8762 ERROR: BC_REGISTER_LOOPER called without request [ 92.866366] binder: 8759:8762 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00005cd000)=0x0, &(0x7f0000e41000)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f000097c000-0x4)=0xa3, 0x4) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) clock_gettime(0x0, &(0x7f00005d1000-0x10)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000c80000)={{r4, r5+10000000}, {0x77359400, 0x0}}, &(0x7f0000e6b000)={{0x0, 0x0}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000144000)={{0x0, 0x0}, {0x0, 0x0}}, &(0x7f0000d30000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) recvmmsg(r2, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, r6}) 2017/12/02 23:46:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000974000)={0x0, 0x100000001, 0x1f, 0xfffffffeffffffff, 0x24c3, 0x80000000, 0x100000000, 0x7}, &(0x7f0000132000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r6) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000cef000)={0xaa, 0x1, 0x0}) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ab8ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce817400000000000000023659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeeb62833b15b20eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = userfaultfd(0x800) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000ff8000-0x10)={&(0x7f0000ec6000/0x4000)=nil, 0x4000}) r2 = socket(0x0, 0x6, 0x2) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000ff8000)={0x0, 0x1000, "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"}, &(0x7f0000a34000-0x4)=0x1008) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000ff8000)={r3, @in6={{0xa, 0x1, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401, 0x8}, &(0x7f0000ff9000-0x4)=0x98) 2017/12/02 23:46:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000652000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000dae000)="2f6465762f6c6f6f702300", 0xfffffffffffffff8, 0xffffffffffffffff) close(r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006ed000-0x10)="2f6465762f73657175656e6365723200", 0x101100, 0x0) socketpair(0x1, 0x0, 0x4, &(0x7f0000ec8000)={0x0, 0x0}) syz_open_pts(r3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f000065e000-0x2)="2f6465762f6b766d00", 0x40, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000050000)={0x0, 0x1, "bf"}, &(0x7f0000ff7000)=0x9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x4000000000005, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x40000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe) r4 = socket(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000439000)={0x0, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00009c1000-0x10)=@common="62707130000000000000000000000000", 0x0, 0x0, 0x0}) r5 = socket(0x2, 0x4000802, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r5, &(0x7f00005f9000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x30, 0x2003, &(0x7f0000a22000)={0xa, 0x1, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x21}, 0x1c) r6 = add_key(&(0x7f0000dc0000)="6c6f676f6e00", &(0x7f0000f60000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f000037f000)="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", 0x1000, 0x3) keyctl$setperm(0x5, r6, 0x2020002) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000c6b000-0xf)="2f6465762f73657175656e63657200", 0x0, 0x0) unshare(0x848081ff) fcntl$setlease(r5, 0x400, 0x0) fremovexattr(r7, &(0x7f000057c000-0x18)=@known="73797374656d2e706f7369785f61636c5f61636365737300") times(&(0x7f0000c21000+0xc12)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000037000-0x4)=0x0) connect$ipx(r7, &(0x7f0000130000-0x10)={0x4, 0x3ff, 0x9, "708c52dd4011", 0x3, 0x0}, 0x10) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000850000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f80000-0x4)=0xc) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000b6d000)=0x12, 0x4) 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x5b7764e8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) fcntl$getflags(r1, 0x3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:49 executing program 4: fcntl$getown(0xffffffffffffff9c, 0x9) getpid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="6e65742f436f6e676563746f7200") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) [ 92.930105] binder: 8759:8762 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:49 executing program 0: r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) msync(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000d39000-0x11)="2f6465762f7667615f6172626974657200", 0x2000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000870000)=0x7f000000) 2017/12/02 23:46:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") bind$bt_rfcomm(r1, &(0x7f0000b4f000)={0x1f, {0x3, 0x80000000, 0x10000, 0x7, 0x1000, 0xfffffffffffffffd}, 0x8c}, 0x9) r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) clock_gettime(0x0, &(0x7f0000476000-0x10)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={r3, r4+30000000}) 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000fd7000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f00003fb000-0x4)=0x14, 0x800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000ea2000-0x9)="2f6465762f72746300", 0x8a000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$void(r0, 0xc0045878) fcntl$notify(r0, 0x402, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000e57000)="6e65742f6970365f6d725f76696600") preadv(r2, &(0x7f0000cdb000)=[], 0x0, 0x45) recvfrom$inet6(r2, &(0x7f000007d000-0x29)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x29, 0x2142, &(0x7f00003c8000-0x1c)={0xa, 0x3, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, 0x1c) mmap$binder(&(0x7f0000590000/0x4000)=nil, 0x4000, 0x2, 0x1010, r2, 0x0) 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000b6e000-0x8)="2e2f66696c653000", &(0x7f000094a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="0008742f7274365f067461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000af7000-0x4)=0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) socketpair(0x11, 0x800, 0x5, &(0x7f0000d64000-0x8)={0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000092000)={0x0, 0x0, 0x0}, 0xc) sched_getattr(r2, &(0x7f0000785000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) 2017/12/02 23:46:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x4, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00004e8000)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000277000-0x4)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000df0000-0x18)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, r3}) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00004cd000-0x4)=0x0) pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r5, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000dee000)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000836000-0x118)={0x1, {{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) sendto$packet(r4, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r7, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r6, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r5, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) getgroups(0x1, &(0x7f0000b20000)=[0x0]) setfsgid(r8) splice(r4, 0x0, r4, 0x0, 0x5ad, 0x6) r9 = accept$alg(r6, 0x0, 0x0) close(r9) [ 93.011101] binder: 8806:8809 ERROR: BC_REGISTER_LOOPER called without request [ 93.018968] binder: 8806:8809 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000362000)="2e2f66696c653000", 0x200, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000b3a000)="5ee38fd5ef09159c31a99386dca9f9fd594178c88de972d4ff514852a97d4064d075d22f4fb6c471fa762accbafb7cbfbb6eacd1b51313071f6c5421077a5d073a9479a04d49483f05bb5f23cf44440fd93dd3c4f3cca638c7367e809e4abac90c66b28086610a7bdbca1c961addde6822264e96f2eb515ed4dcc5ef0bac29d4726e1d59bc1a1c5627e67eebb6162eb22e39c4c8971354fddbff823f54fd8eb83f6fe0d16c1f792e849bf7d628a1caee25ffa5845cd8d3b73bde52a04e703b9741647d0a97707f599fffe50a0f5fd1a7a6236ec5819359fb8e0bdaf383ae19d3b8dfa87f8e5c8a80d248e0b91884a20eb6e0d3053d6f39ead3f1957aecbc3cd257248a10f097e44b0d3fd23c6ffdaee72295867079d8a450e023587f15f562261caecfd4747e35573080e40757c077b23764411792ab5f48d2b93d9ddfd5cd3efc09b29eb684fca0e4adfc7e38df10cf95075225d052077231cd0c549592694cfc9f2129a64a9f89f09e9ce1dc543adafc7b911450b95dea62edb7b9e842483c48cd8350f1a074e17677e79e95ae4d36fcc5c0e0c150de5449184b118f75c523d60817bef3e6a02d4f0db410367bc243f8714b51749eba7360373609c14e57f1d3a375bb3bb7f0ce51d61b8a3a25bf140e3958816140c44cf00de596388009fb63afb820d36fbf1d70263a50496018e293aabbc9d3b543c96ccd84a78f369d12f9cca0a5d9017f28d4ef4cd0fb707b2759934cb7c03e356a465cf18cea9c056ee2ff3545668a59ac79d7fba8b2ae9ee6817acc7b69ee91f2d73c5e1695c647050048862981587424e13d5821283cba920817ffccc3a320fe0a70aa2ac9533f6fb325dd422ee5ef391bc553e8fd8f90c28d7467af12191f9fdb39f1465e1cb80a50ceabe0cb142a57618cba72b5640204abf49e396404a7934dcb98ef19f3b688ca75660e2a0990e410a93c1b55d4849e60a9cd0b8b991f6864cd8d525af045cea9aaf1d2b37f1a963e7ccd51e69fb67917223a67a78d15c4aa17c6263664f931832b93149c7d97ec336ff89bac6733383427785033286c9a1cf3668f4dd8195752737c27e94de3c86464a3ad495925c3129f51fd7dadb9bb06278f9a403607bd8cd79ee3273f98d4692b6700ecbb44ab9251c5b6d9c086e7b754cb7e56cb8257c52afa5ad7f36f633bb7f5769b37d5fee5d34dc399bb43481576b844de640e11b79227f063a7ee2d3dddac1927773a62043995571ad235cf5d734469dd60b6ac715d49dc2d4871501fbf404806d6cef06e91e63d8c2a5dfd109e299a4882a3ff0e5d9355bd60a48c41494ad1cf29c34b901d9b3660327bc1b21dfdd2adbf21813e82d373562a23100601af69a795cb414a3abf428b10697c84f635b6942fdcfe469b722b081b6e8c3b91b65bd5849bf5f7440c54647ad2e1057f808811728a09404ce56b36d456bca8d0039c0b0f1b12c99dc5f0c6a3c043ff9b6d64fba04bf967875b8cb46e7b0a9121b2cabf004b16f7e458ff24ec8c89e14fc19f81f6b7a75b4a71992698ddf70df2a415df6fae150280f3cd101abcdb31bf5f85ad3949cfcb867827c518e318376147b3b55a8c68a50349e72f991234892f6997b62ce51d61397ffce1737fafa7581cf6187c4637273ed9b2cabe3a498c7ed6d50f4edbcf38f5bb6896004f3e3b69bf51d60215ab160e2957f8de5faffceb7413250e9876706e5fc91b506c97860605fb613d81aff5a631e58d75cafe49f8470e86609f1b10f51b8b57b668ca083e68eb1b963387f3e5d5d72fafafbb57d481cf4f8b0d656b5d52365ef45fe28a419ad55c9510eab20d587005563cba8935235d8d50dec5bdbb6f796fe03afebfcdec5304b11a631ba1ef0219ca3225225848e92fb931ce428af8f47dbbd8c0f8daeb6e06b42eeccfd39aa4c19233f9ea7382f1edf8c700897ea8dc1bf3e2213fd46ca8dfd3fd5c6e1c84f6d57fd4ea40c7fc87e9bc17193f43e77127c76d7b60f0305652fbd8776e27f058bc685a370372d773c29ad40c612198b0a53922750082f5710de44dc1a386b95423da4864b5f3ae9eb6e514cc3e3eff8dffe70c9d8ca8059b8b60709daf06c57a9c5120c90bcb6fe35c17eaf30d3f825f2dfec6eabe8a404ee455500eacf633a7b6b4b4796832d8b06dbf9542e4863a9238d43cf005a1a650f912d69e830694b369d9b612ff881347957e164f6d8581ae9b296742bb399fcaf3599229007dfdfa8ad95cbef4f5838082e0b061ff8eccf71e88566eb7d8b41d6ecaae29124ede5d6f4f9cdd3f7862fce091bd6f38b43ed178174edccaed108d01080b909e4e6e6e80db37e2bcac3967482acc64e3caa939645089650cf391bc8735d30efd97430b5eb4504fcb2190b14c0aa333c2dfc016f19a5f6829a887b6e271afd68d55efa8cb621553345f07a3ab57b418471cae7f6d07f380c6fca763f8434dbad088262e26111b95ccf63fbcc8707dd2d72f02a6ee1b01c72227c28860a24f1231e6f14d1e6747526895604f9cbf248904685ecaa805f3efe22884afb3836aab500ddd3371978438dc79b4cc5f9188470ce3d0af03d5713d1805837585172d0cf59f6b0e246627b13a0347262a9274a21e1b0955b1f3a464fc5de09f16b667a346d465fca7cd43ad4339a703a87b301a8765853c52ce32261ed94ebf91f17c707c90254428b4d2d812ee4b9ddee0cdc84c0dc8de4ebadaf7afa8003d19638ee705d3cdc2039776acbe55dcc075b9041599f68bc0c636744829b69097657bf672065d8482a9259349dcac9a75afaa71385435320a9cae835428a008e676a8b32335cc1383fe41f23347c28491200f5d8dfdb7f94df6948d7c86fd4c92b7a0e8ecfac788bf0f4952053af99a852235afb033ca96978740dd48d55e066d34e980c80fbdbc82a4f16aa8e390c73a94c850a9ea4f9add1a7d3510e1e2153f2cd02f384ed15d6c01239e7c0988e9df8c700a3a4b77fe990dea50e63b7b512b7b7ba1219852c2bf09656c0d96d50e4e5eacf94c2981679dd0e3be494fe989a0167f1ab3201b18ee1609e131ae3221e33da740e9f6fe3fc16d90f78d11b1b93ef67009ce45490853b8aa78cfec3329831ec9c48e75d2caeb4a5a052e8472724a8a24e317647753fa106313b3c18cb2712822ea2f27452ffc99f8015e37ec3a9b7dba3b1087c3a3b2e6d3903f0161085111420d97edde0578d488a7fe26d97f0bc6f31e5a2440c3570147e3589e17ae999c5ad4abcbbade79596eb17cadc2b07cf6d20b3c06237362f99c9311a8dc01b2c5e802c8e4be3c2989977130a48af4bf7ee2822031107ec1ee36130207209eddb0aaa3066851784b8802ebc1a3cb104a82dc823c203cc41c01553db97b9bcbeeeb9f04a689f61c6bc5fd544f361a85c2d2c957495907b5d835541c9ac204b5e8329ec72696f1cb1bc48746f93732a7a6fa6ab43588610d63279541329159d7e3d16b1228e94e9fb9465c0f752dcdd2403a866d0b62dbce72b88e0848672c761bc6bb3e6a7ce9b4a6c9428a328c0f4c4362a49367c04c8a58b16cd1134c828a187c4b83871e50a2f26dc0ca40e8019f22b4a02a136abaa1090f4a3465530399f5c5ca08b750b001898e75900d0e2eae131593cddb08503d889eedb78d2947375f27680b5f72382d0f117df1bbb2b0c3775a780b3894f8413a6a7ccbb9f3281b14cfdb6f80d82b5e74557bb299ff54b3567e99969dcdf0108794db0725ba3d51337f318cb506b7d34b5cde9e12178209ffd86b6814634678c15c30a638e0fd55198a22724299f4e4cf556a65fd7dd744e2b961d715f8f35ecd3f62034f822111341605a5ffad87fb1b4d787b7caee284535f738caa7aac0ea91eb269a64b3c1c31ec33d2978dca789f5676d85732f1cd8c9be06e5f8694d8cbafaa743965adf389eba38e8966ff0df7e8a9f9e3c505c180898519c8d026a35a9de690b7731285bdec792e9fe535a5ec631579b8d8c64e241aa9e16d2fa4ab11eda229519ac1a0d736ffc2f420384cd780a04bee7a63e3b51a6278932315eb13e3a2bcf21dbb01d5b96710f9169a7015c2117af2927234e107ee3694c19b835fbb39d450b1aded50b153446258ac696af64657b5e76aba47068a6e92d87919cde8f0f046ef1934cee8db344dd29f700259cd604ac2d4bcd4fc0d43a45217b6d305696d6c1d1cb5f48c5c683f66713fe6cf2a24a61a926b94109941c53c72a4fc708a31f71879d16ff3641916a19717d4a673029fc0d0feeefa447c2b9e42a2aef472119a5be7da002b6207055152b09c52f5a4ab6b0c54edf49fd917eb7362358c29db8b3c9de992ec9bad031770e0e9b6ac5cbd854652bf435984917bb3a85e7b6c5de0e54ee214df58145d57e44a755377d5b560e604037cca678341ab90fe4351b39871047b5f009de996e3c50858d4aee2a5f4bcddb575e37a7ab3b8a38060f677cef52b68faac10a58744c22511d54b47e37e60c103e37e2e4db295340858add480fc1ecae1b011eae0cb06892b4ad9aca2f6b3908f47f413c94514dada7e25865373dee88cb06c8d1ccfb08b0c4fb7036cc0d172348e22f9352f77f9d3c1d74fdee46cc6eac69d4e487c10be01db0e9c497a2179a9db5b797c5d1a5873044cace29c16ea89116d8615208312f819596f8e72a0ca9361027800f9af1fefff564426cc7d416bf39a9f869fe68eafad08a6896dc1f04906794627af2619ff9c1f52a7f9a1773ff215f0125bf453fed453c490d2b2db7df54eb89af22faffa20c7b03a635470f0a60b53cd824ea278a73d34789d328505e41a66babd861fa53e646555b7797aca2fa48360af59a40795d9af4f95435082a38d7dd52cf0d312b3fe9ce2a41f37f802a6734f85ff6cb5a8a39c4ee4e0d4e54429a40ef6b61a6ccd07ccca5ef8884af657ed2a63b6299decf91719c6a8c0f07ae6004eb8521046452308b41aae212487d28551e299e1ef1a198c37499eb3cc75343027c196dea6f1cb558c62afef618410a84b1ccd1cb24165976fb659eae6975511d92cd657176186c58daa279456efc942de713895ee1a23fd5fb938125104345fdcf943e3ff3adf00be033f31e3ad1f8fe7bec7fabf739ebf1377f88f71836f418f54fea24770e6ee2078acb206e0fd5309eda2cc02efc4731c47b84265907f223f41e5842fa183c8711687c571a0921d7d2a9e70d6529a22ea9b0a39be23b335fe1457b71f73f3ba959e775830dbb7ebd4b97665278a89b4fdc8a922b4c26a29b4fa15fdaf065c3c0d536040d4822dc088d3fe0eee1aafadc1863caefe2e71d1a1e206368a9464c80d452ea36c00206d4511dd64e6928d078714dcb105a3b51f37e716a1399cee9a8956148064de6015fb2e4bc128809e6d4b3ff33e375597d9ee5ff7a79bd7c8b80b4d9fe69b532471e08ab8e2a6cf64f3865e1d5c2279e9ff71556a0c57c66a02e1cc8022d8ef537cdcecb744be0ed7297bdf7ce80c3f269cec02173aff0b1f815c2a6282a0de0a85621366f7bba0e07460c0423f140958fd4cb80c92cb5834eb4099882335ff3006c226d0953138470d363206d0cbeae7b9cda4439d0cf5a5421c8c124a2bd413c590f267568c7238838c4879f54e7e9352dd04697185ef3ac318513999c8bf1637ab039c8da5ec3bd5d940d86524efe8e87d0ff3a44d538005653b0106dda2b2d181fa860dcc6344b45d5095b047fa7ef59935e5f018e42f6faba64cd4b4ab1604a53653cb4add393c7e6a2af9c48d836e0bb148b78e304d68cc44c83e358e43c13c", 0x1000) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000ff8000)="2f6465762f76637300", 0x40, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000700000)=0x0, &(0x7f0000ff7000)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000ffa000-0x4)=0x3e, &(0x7f00004ec000)=0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000ffa000-0xd7)="190e358041e3f5fe3ae20b3759267153a14c807f4c980d1f7b3e73cb5e368963638c2acfde6d1ce772b9ba1fca7c64a38e37b6154919f5f0e4b2386a7e5942666e1f8855982fde4b376e854efbacef5594a578acda276a5f0c000509cfcf103806107563e97deb7acf78949f0310abb5b9b9151b84ce9a16a31a8f95aec7726158fb39fb80d54bd19d407fd06b604a62560bd0939e2a48e255799087cc2f28b4aceb61054a05b70d66121c7fc9f6e8766aa06f74bf2991d7b1e5d9b2a681bf1ed952d4a9c58bffe553af109b0c7aa1992c3854c801971e", 0xd7, 0x4000, &(0x7f00002b4000)=@abs={0xb50d4edf0f79a60b, 0x0, 0x3}, 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r2, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r2, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 23:46:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00003f9000)={0x0, 0x0}) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00001fc000-0x4)=0x0) syz_open_procfs(r1, &(0x7f0000fc3000-0x10)="6175746f67726f757000") r2 = semget(0x0, 0x3, 0x1) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000239000-0x18)="000000000000000000000000000000000000000000000000") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000008000)="2e2f66696c653000", 0x40000, 0xe8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000fe9000-0xa0)={0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8ab, 0xfffffffffffffff8, 0x3f, 0x9194216, 0x2}, &(0x7f0000bd7000-0x4)=0xa0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000076000)={r1, 0x20, 0x10}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r2, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$evdev(&(0x7f0000c4c000)="2f6465762f696e7075742f6576656e742300", 0x1a8, 0x10242) r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x981, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 93.074473] binder: 8806:8809 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 93.090310] binder: 8806:8820 ERROR: BC_REGISTER_LOOPER called without request 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$TIOCSTI(r2, 0x5412, 0xeb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000fd9000-0x10)={0x0, 0x94, &(0x7f0000233000)=[@in={0x2, 0x1, @rand_addr=0x3f, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @rand_addr=0x101, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1000}, @in={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x200}, @in6={0xa, 0x1, 0xfffffffffffffff9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xa0}]}, &(0x7f00006dd000)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00008c0000)={r3, 0x100}, 0x8) 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) fcntl$setflags(r0, 0x2, 0x0) 2017/12/02 23:46:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000664000-0x1)=0x0) syz_open_procfs(r1, &(0x7f000003e000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) 2017/12/02 23:46:49 executing program 3: mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x3e, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000d53000-0xc)={&(0x7f000050e000-0x8)="2e2f66696c653000", 0x0}, 0xc) r1 = socket(0xe, 0x10040000003, 0x0) socket$inet(0x2, 0x5, 0x7) getsockopt$inet6_buf(r1, 0x29, 0xcb, &(0x7f0000df6000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000f62000-0x4)=0x37) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000c55000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00001ec000)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a87000-0x4)=0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in=@loopback=0x7f000001, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x267) sendto$inet6(r3, &(0x7f000028a000)="", 0x0, 0x0, &(0x7f0000999000)={0x2, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000198000)={0x0, 0x1000, "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"}, &(0x7f000054e000)=0x1008) mmap(&(0x7f0000a23000/0x1000)=nil, 0x1000, 0x2000007, 0x30, 0xffffffffffffffff, 0x5b) pipe(&(0x7f0000cc1000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f0000dd7000)={0xb, 0x9, 0x2, 0x506, 0x12, 0xfffffffffffffeff}) write(r1, &(0x7f00000a8000)="1f000000120003f2f909000000e100770100000005002200dffe1aec000081", 0x1f) recvfrom(r1, &(0x7f0000c8e000)="", 0x0, 0x0, &(0x7f0000e2d000-0x9)=@rc={0x1f, {0x4, 0x8, 0x9, 0x100000001, 0x100000001, 0x7}, 0x0}, 0x9) recvfrom$ax25(r1, &(0x7f0000340000-0xed4)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xed4, 0x800001000, &(0x7f0000b73000)={0x3, {"32a4418c9f497a"}, 0x0}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000c35000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffd, 0x2, 0xfc, 0x7, 0x94, 0x2, 0x7}, 0x20) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000560000-0x10)={0x7ffb, 0x401, 0x400, 0xfffffffffffffffd}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000534000-0x74)=[@in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, @in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffffffffffffffff}, @in6={0xa, 0x3, 0x2, @loopback={0x0, 0x1}, 0x0}], 0x74) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00004e5000)={r4, @in6={{0xa, 0x2, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x40}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x0, 0x8, 0xd28b, 0x6}, &(0x7f00009cb000-0x4)=0xa0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f000004d000)={@loopback={0x0, 0x1}, 0x29, r2}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000e6e000)={r4, 0x30, 0x4, 0x5}, &(0x7f0000849000-0x4)=0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3) 2017/12/02 23:46:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r2, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r1, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r4, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r3, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) socket$inet(0x2, 0x80803, 0x4008) mmap(&(0x7f0000000000/0x282000)=nil, 0x282000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r5, &(0x7f0000281000-0x8)={0x1}, 0x8, 0x800) r6 = open(&(0x7f000004c000-0x8)="2e2f66696c653000", 0x400000, 0xff) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) io_setup(0x0, &(0x7f0000264000)=0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00001e8000-0x4)={0x3, 0x100, 0x20}) socket$inet6_udp(0xa, 0x2, 0x0) timerfd_gettime(r6, &(0x7f0000fbe000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) timer_gettime(0x0, &(0x7f0000ab8000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) clock_gettime(0x8, &(0x7f00007f1000)={0x0, 0x0}) timerfd_settime(r6, 0x1, &(0x7f0000943000-0x20)={{r8, r9+30000000}, {r7, r9}}, &(0x7f0000f19000)={{0x0, 0x0}, {0x0, 0x0}}) clock_gettime(0x0, &(0x7f0000a5c000)={0x0, 0x0}) select(0x40, &(0x7f000042e000-0x40)={0x3f, 0xffff, 0x6, 0x5, 0xffffffffffffff19, 0x2, 0xb8cf, 0x5}, &(0x7f000059e000-0x40)={0x9, 0x0, 0x3, 0x8001, 0xf4c, 0xcd3b, 0x7f5, 0x6}, &(0x7f000091a000-0x40)={0x1, 0x4, 0x1, 0x8, 0x110a, 0x0, 0x0, 0x4}, &(0x7f000055f000+0x667)={r11, r12/1000+10000}) futex(&(0x7f0000172000)=0x6, 0x7, 0x8, &(0x7f0000835000-0x10)={r13, r10}, &(0x7f0000837000-0x4)=0x6, 0x0) mmap(&(0x7f0000282000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000ff7000)={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f000081f000)=0x40000000000001, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000ff8000)={0x0, 0x0}, 0x80000) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000ff8000)={&(0x7f000031b000-0xc)=[0x3, 0x3, 0x9], 0x3, 0xb599, 0x8000, 0xfffffffffffffff8, 0x7, 0x4, {0xffff, 0x7439, 0x6d0, 0x1, 0x0, 0x7, 0x8, 0x9, 0xffff, 0x0, 0x7, 0xfb, 0x81, 0x3, "90c0ad5680cd9b48daef0e7cf3876844cfee64dacb1a35af0e8a5243424af00e"}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000b65000-0xb)="2f6465762f6877726e6700", 0x80, 0x0) connect$llc(r2, &(0x7f0000770000-0x10)={0x1a, 0x1f, 0x1, 0xffff, 0x9, 0x8001, @random="36edcd3ce478", [0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffff9c, 0x84, 0x4, &(0x7f0000d2b000)=0x0, &(0x7f00008c5000-0x4)=0x4) [ 93.090324] binder: 8806:8820 BC_INCREFS_DONE u0000000080000000 no match [ 93.090331] binder: 8806:8820 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2017/12/02 23:46:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000006000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000b01000-0xf)="2f6465762f73657175656e63657200", 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1000) r2 = open(&(0x7f0000d36000)="2e2f66696c653000", 0x90001, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000528000-0x74)=[@in6={0xa, 0x2, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xff}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x7, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7}, @in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x40}], 0x74) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f000082e000)=0x80, &(0x7f0000f25000-0x8)=0x4) 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000c35000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000792000)="6e65742f7274365f737461747300") ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000d08000)={0xffffffffffffff07, 0x0, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xffffffff80000005, "ec335a56c234c574", "b53ab908f39cdf9b4b887fd2c1edb8e010a4c47684a05f0fa3dc1a9e1e060463", 0xfffffffffffffe00, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$loop(&(0x7f0000436000)="2f6465762f6c6f6f702300", 0x0, 0x0) r3 = msgget(0x1, 0x200) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000bff000-0x69)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000094e000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) fremovexattr(r0, &(0x7f0000982000-0xe)=@known="73797374656d2e61647669736500") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x54) 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xe, 0x3, 0xffffffffffffffff, &(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000ebc000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r1, &(0x7f0000368000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x45) 2017/12/02 23:46:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r2 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000506000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00005a3000)=[], 0x0, 0x0, &(0x7f00005a3000)={0x0, 0x989680}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000eb9000)={0x0, @broadcast=0x0, @loopback=0x0}, &(0x7f00000ef000)=0xc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000913000)={0x3, [0x8, 0x5, 0x9]}, 0xa) [ 93.228491] binder: 8863:8867 ERROR: BC_REGISTER_LOOPER called without request [ 93.236011] binder: 8863:8867 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") syz_open_dev$loop(&(0x7f0000c70000)="2f6465762f6c6f6f702300", 0x0, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000ff7000)=0x8, 0x4) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000ff8000-0x4)=0x81, 0x4) munlockall() 2017/12/02 23:46:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000dad000)={0x3, r0, 0x0}) pwritev(r0, &(0x7f0000120000)=[{&(0x7f0000e28000)="54d0098e20a5d754340af74ff6", 0xd}, {&(0x7f0000fc8000-0xf5)="676a308cc1e1f617b51add786dd4c3b7a9191f42ae83c6b1e17c00ada5aa207a3976eb2fbca211ff030428ef36926c0a84a5fedd143960dfb2fe1120a6a2011a882254f1f0c54f80071a16d8e9741b9c0dba868e1494474f03c8fce5ebd05107e7ac7b479d9e650f65dc8a4f07a8df8909f32b020cb2dfaca6585e128380efa68f0e90a7f92918c57e0f55efa65faa6b6ca88ce990fe4aee0bfbb6a1e42464a96c3a1f46aa3628abbfecf85bddc008d38e3442ea5a68695ec057f4c951dc5b758a16247835e8e3898a6ea479b6332f21cfa670a0ed68166ba2dd4e73605b2c5f5c9cbb464e111078b6a75f2f9cb55f0a317b9c43af", 0xf5}], 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) sched_getscheduler(r2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00003cb000)="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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r3 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) 2017/12/02 23:46:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000cf8000-0xa)="2f6465762f6375736500", 0x501000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00003af000-0x50)={0x4, @tick=0x224, 0x18b6, {0x2, 0x4}, 0x5, 0x2, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r4, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r3, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r6, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r5, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r4, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r3, 0x0, r3, 0x0, 0x5ad, 0x6) r8 = accept$alg(r5, 0x0, 0x0) r9 = getegid() fchownat(r3, &(0x7f0000b2c000)="2e2f66696c653000", r7, r9, 0x1000) close(r8) 2017/12/02 23:46:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000011000-0xd)="2f6465762f736e642f73657100", 0x0, 0x8000) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000ccd000)={{0xa, 0x0, 0x3d, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1f}, {0xa, 0x3, 0x9b9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, 0x6, [0x7fff, 0x400, 0x0, 0x80, 0xfffffffffffffff9, 0x1000, 0x100000001, 0x6]}, 0x5c) clock_getres(0x4, &(0x7f0000b55000)={0x0, 0x0}) clock_settime(0x1007, &(0x7f0000b62000+0xad5)={0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f000000d000)={{0xf50f, 0x0}, {0x800000000000e, 0x0}, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$sg(&(0x7f0000fed000)="2f6465762f73672300", 0x8, 0x200000000012001) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000285000/0x18000)=nil, &(0x7f00003be000)=[@text32={0x20, &(0x7f0000b9c000-0x41)="0f01ba0b00000066ba4000ed660f388115000000000f160f0f0866baf80cb888896b80ef66bafc0cecc4e19d643266baa100b807000000efc4e1c5ebe80fc75b62", 0x41}], 0x1, 0x40, &(0x7f00007da000)=[], 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000208000-0x4)=0x0) ioctl$TIOCGSID(r2, 0x540f, &(0x7f0000f2d000-0x4)=0x0) getpgid(r3) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00009ec000-0x4)=0x0) ioctl$TIOCGSID(r2, 0x540f, &(0x7f000056e000)=0x0) r5 = getpgrp(r4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000a7f000-0x30)={0x100000001, 0x100, 0x100000000000004, 0xfffffffffffffffa, 0x81000000, 0x800281, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$inet(0x2, 0x1, 0x0) r7 = dup(r6) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000000)=0xd3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000347000-0x20)={0x4000ff, 0xffffffffffffff65, 0x4, 0x4, 0x6, 0x80087, 0x73, 0xca, 0x0}, &(0x7f0000882000)=0x20) bind$inet(r6, &(0x7f0000f02000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000e9c000-0x10)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f000040d000-0x4)=0x200000066e, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000402000-0x5c)={0x3f, 0x2, {0xffffffffffffffff, 0x10000000003, 0x400, 0x3, 0x958}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000128000-0x9)="ff00e9", 0x3) connect$inet(r7, &(0x7f0000987000)={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet6(r7, &(0x7f0000f6a000-0x43)="6c", 0x1, 0x1, &(0x7f0000c62000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000eb1000)=0x0, 0x4) r8 = add_key$keyring(&(0x7f00007c6000-0x8)="6b657972696e6700", &(0x7f00000af000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000b29000)="727872706300", &(0x7f0000f4d000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000265000)="2c2639f8f8704c4a2cb5cf62cfcdd1fdb48abc45aaa551c9acbd2e129519d256ad581a2b64db741a4f8efc75b68d7312b4e565555a3865484cd8ce8c4e0f7c4a55f8f9d9cb10dc6c8bd97868a427448b9af501288cca8702965d32ee8afe2d0183a93a0d84ff2065d36889799eec7d6345f204072038fd15a43fe8e1d2adc0e00894202d1a63b092fd04", 0x8a, r8) r10 = request_key(&(0x7f0000253000)="7400755374656400b0", &(0x7f00009ee000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000db0000-0x9)="2f6465762f73672300", r9) keyctl$describe(0x6, r10, &(0x7f0000088000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf4) socketpair$llc(0x1a, 0x1, 0x0, &(0x7f0000a79000-0x8)={0x0, 0x0}) r12 = geteuid() sendmsg$netlink(r7, &(0x7f0000083000)={&(0x7f00005a2000)={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f00001b9000-0x30)=[{&(0x7f0000882000)=[{0xa45, 0x0, 0x0, 0x0, 0x0, "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"}], 0xa45}], 0x1, &(0x7f0000eb0000)=[@rights={0x18, 0x1, 0x1, [r6]}, @rights={0x18, 0x1, 0x1, [r11, r6]}, @cred={0x20, 0x1, 0x2, r5, 0x0, 0x0}, @cred={0x20, 0x1, 0x2, 0x0, r12, 0x0}], 0x70, 0x80}, 0xc0) clock_gettime(0x7, &(0x7f0000243000)={0x0, 0x0}) 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00007f9000)={0x6, 0x0, [{0xb, 0x4, 0x3f, 0x10000, 0x5, 0x0}, {0x80000008, 0x2, 0xdf, 0x9, 0x6, 0x0}, {0x80000019, 0xffffffffffff0000, 0x13, 0x10000, 0x1, 0x0}, {0x8000001f, 0x7, 0x20, 0x7ff, 0x8, 0x0}, {0x80000007, 0x3674a02c, 0x49b, 0xff2c, 0x8000, 0x0}, {0x8000000f, 0xfffffffffffffff9, 0x7, 0x1f, 0x6, 0x0}]}) r1 = syz_open_dev$loop(&(0x7f0000435000-0xb)="2f6465762f6c6f6f702300", 0x100000000000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 93.273252] binder: 8863:8867 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 93.293372] binder: 8863:8879 ERROR: BC_REGISTER_LOOPER called without request 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r0, &(0x7f00004f4000-0x10)=[], 0x0, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000353000)={0x5, 0x6, 0x0, 0x80000001, 0x8, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f000043b000-0x4)=0x362) 2017/12/02 23:46:49 executing program 3: mmap(&(0x7f0000000000/0xf41000)=nil, 0xf41000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00006bd000)="2f6465762f7161745f6164665f63746c00", 0x80, 0x0) mmap(&(0x7f0000f41000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000018e000-0x108)={0x0, @in6={{0xa, 0x0, 0x80000001, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0x7, 0x683d, 0x1, 0x3, 0x0, 0x3, 0x8, 0x80000001, 0x2, 0x5e, 0x5, 0x7, 0x400, 0x0]}, &(0x7f0000f41000)=0x108) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f000068b000)=@assoc_value={r1, 0x0}, &(0x7f0000000000)=0x8) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000f37000)={0x26, "736b636970686572000000000000", 0x0, 0x100, "70636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bind$alg(r0, &(0x7f0000f3f000-0x58)={0x26, "736b636970686572000000000000", 0x204f, 0x0, "6362632d6165732d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390dc86dae79fa409d4d54", 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00001b5000)={0x3, {0x2, 0x2, @rand_addr=0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c0, 0xe4, 0x6, 0x101, 0x1f, &(0x7f000084b000)=@generic="05868b8020aad8211dd71c340a9538b6", 0xaa59, 0x401, 0xc}) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00005d8000)={0x0, 0x0, &(0x7f0000b5d000)=[{&(0x7f0000a95000-0x3d)="0cda5e1b78ab4cd5040d369241d55b3b0c15c2d769486935741fc701a6b9d0be", 0x20}], 0x1, &(0x7f0000f3a000)=[], 0x0, 0x4080}, 0x4) r4 = semget$private(0x0, 0x1, 0x200) mmap(&(0x7f0000f41000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$GETPID(r4, 0x3, 0xb, &(0x7f0000f41000)="00000000000000000000000000000000000000000000") syz_open_dev$tun(&(0x7f0000024000)="2f6465762f6e65742f74756e00", 0x0, 0x2) io_cancel(0x0, &(0x7f0000a9c000)={0x0, 0x0, 0x0, 0x7, 0x1f, r2, &(0x7f00008d6000-0x1000)="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", 0x1000, 0xfffffffffffffff9, 0x0, 0x1, r0}, &(0x7f0000a97000-0x20)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000f42000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000f43000-0x8)=0x9) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000f3f000-0x10)="2f6465762f73657175656e6365723200", 0x80000, 0x0) mmap(&(0x7f0000f41000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f42000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f42000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f42000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f42000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = request_key(&(0x7f0000b49000-0xa)="69645f6c656761637900", &(0x7f0000f42000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000f42000)="736b636970686572000000000000", 0xfffffffffffffffc) mmap(&(0x7f0000f43000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000cda000-0xb)="636966732e69646d617000", &(0x7f0000f43000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r6) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000f42000-0x6a)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000f42000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000f3f000-0xec)={0x0, 0xe4, "1da58e7c7495fd78a2b45b58c508bc629f947e54fbe1280b28d09a7d6f1cf974435e8b809857e2e74805e8a9d94e23167196cc8c3d97ec4b251620846fc4d2d7997980270258f7cc062d98687ced3014aa92fa992a5c0940ba2c8bf9ae5da58b08bff6660bbe88d3da6c92260d9fc1f9593115fdc5c6f35a84597d3d7f5f7ddfa7a42b7463460bfbdea8fbca255f3ba4cf7ea310ef2b000ecbeba372a21c8ec5887459b7a1c09feabf6017b7c01a6427f62d15ae1affa94fd5bc8ecc358e578a7845045bad9e290f4ad9954718049688e0b4dc94fc5cf955691ece12d1e29987eb5da20f"}, &(0x7f0000c7f000)=0xec) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000cd2000+0xf64)=@assoc_value={r7, 0x4}, &(0x7f0000334000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000eaa000-0x8)=@assoc_value={0x0, 0x94}, &(0x7f0000f40000)=0x8) recvmsg(r3, &(0x7f00007e0000)={&(0x7f0000f39000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000f39000-0x20)=[{&(0x7f0000f39000-0x13)="00000000000000000000000000000000000000", 0x13}], 0x1, &(0x7f00004d4000-0xcf)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcf, 0x3}, 0x40) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f000081b000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x0, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000ff8000-0xb)="2f6465762f6877726e6700", 0x40002, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x8e, &(0x7f0000ff7000)="b71815b83fb7e0723391e9f625afc4158051420ac6deb56bca8d10164021f05a4b02b2be64c7f865b0b253bdd2b02100df94", 0x32) recvfrom$inet(r0, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f0000ffb000-0x10)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 93.293385] binder: 8863:8879 BC_INCREFS_DONE u0000000080000000 no match 2017/12/02 23:46:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fab000)="6e65742f7274365f737461747300") r1 = syz_open_dev$loop(&(0x7f0000fdc000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000ece000-0x8)=@assoc_value={0x0, 0x30}, &(0x7f0000140000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f000038b000)={r2, 0x9, 0x30, 0x9, 0x8}, &(0x7f00002f3000-0x4)=0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) bind$bt_sco(r0, &(0x7f0000805000-0x8)={0x1f, {0x200, 0x3, 0x2, 0x5, 0xcbd, 0xbf}}, 0x8) 2017/12/02 23:46:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000748000)={0x2343c99c, 0x2, 0x2, 0x5, 0x4, 0x7, 0x5, 0x80000001, 0x7, 0x1, 0xa2}, 0xb) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00002d4000/0x1000)=nil, 0x1000, 0x2000001, r1) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000898000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000c3c000)=0x8a) r2 = syz_open_procfs(0x0, &(0x7f00000a6000-0xf)="6e65742f6970365f6d725f76696600") preadv(r2, &(0x7f000086c000)=[{&(0x7f00004f2000-0x87)="0000000000000000000000000000000000000000000000000000000000", 0x1d}], 0x1, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x1f, &(0x7f00003ed000-0x4)=0x0, &(0x7f00008c8000-0x1)=0x4) [ 93.293391] binder: 8863:8879 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 93.398738] QAT: Invalid ioctl [ 93.400959] QAT: Invalid ioctl [ 93.414808] QAT: Invalid ioctl [ 93.422489] QAT: Invalid ioctl [ 93.428086] QAT: Invalid ioctl 2017/12/02 23:46:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000003000)="2f6465762f62696e6465722300", 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000cb4000)="2f6465762f7161745f6164665f63746c00", 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000923000-0x38)={0x0, 0x0, &(0x7f000098f000)=[{&(0x7f0000f5f000-0xfe)="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", 0xfe}, {&(0x7f0000ede000-0x4b)="1ce04164605c45dd4b07e8f8d40c3cd62cc85b2fe2f851459bccf875d156b03d6966fe0c03445968c88c85e306562366137d2be58eab04f829e31c81d8c2f13f6ff9fb8ead0831d4c48749", 0x4b}, {&(0x7f0000dfb000)="2d5519b1627b23f45d4e3e536fea70c9aa8974ea1d3b9f414589b957db0f034bf6d60115741bdc166801f92290f17f15be1876de2b74933294bb26ba6d8a10161c0c6278211ed078062dc24953b440f80b1e8bb75445703ba93e7b42642f2febdc9c352d654491552306717e3fa34f187e552ccc116a1f2ef3a056a974c1d83d3aaedcda1d916ad5a513", 0x8a}, {&(0x7f0000e0a000)="47d90e0a5c0094fb00c538fa3e4423f17a03a1260b852aabc8c76272383e10157904b68269ec17deb6160b341199c3c6e2c11617463a4dc34fc812e5b7be3c93a61d314c2db3a5f6364803b68b2a5a235c994dc0cdd841db369eb2ab10402cd48eda9fbf47ac002405ef0733b17835f9dc57ff73f47200a9f13b862d18b84379abf07a494cd98b5055147bc4b5db7db903b63dc18092e251219cc3d3e21ce38d8c6a6fb5db7ca52db701c5749a50fc5de8fe04e2c09b9e52c8a8053050a02777294c8ae090230b30df153f0c0e6dce703c8437a422f2eb5e94d77a25b4c8440bd9d320", 0xe3}, {&(0x7f0000c36000)="9645b06391230a05c46fb9fb866f1bfa910968b89676cbd73be8fd52868270b19fd7998bd90a78644a7273c777e38d53f0a92ff4772c5611625e4ebc77059d775bba1fd56a13ee6ebcc689f472228bd7368a579eb41275370d65cfa70fce24e051cdd170961b42574419224c6a600204f22da6d752888fc9b0f9ec0786a65f77425951b7be2bd08a50dab918796993b188b4", 0x92}, {&(0x7f0000bfe000)="52d91ebb60d0394f4bb0d9335a3a548e704106205d419d1e271d4d894d1a6618e71f02c34105dafaabdea680ca290683f60bb84ffd61e074cf11d3829e368c8f6c56e38cb2ebf27063da11ded194256ab2a57e663b420c46ff8e2e53937cf9dd981bc5f821c25e922da41d90d101c4cb8f02afd435408a75cffb973ed3f483a31fc4dce59826fa034e8e4d3023252087e1f3484a7673a452e9b7cd9ae2df8e4a707069fe2b1cbd53c9fc2e247259a65b41eeff937c22bc97f29b622b9e140e6306ec11", 0xc3}, {&(0x7f00002d6000)="bacbd6e1011276eab371bb42aac5a139f986657683e497fe8a3052247e4dfe5c02c92b27e41b757a09cd5120f88db051273ea5cb89f5ce414a8f065c2205904849", 0x41}], 0x7, &(0x7f0000567000-0xf8)=[{0xb0, 0x119, 0x6, "14c3bfeb1977e7358e72534d10e794546f20041577758975816dc3911a46b6314a9052900a55da11d1ab7797aa62047abe180734166b856cc356568024eb9b619e603ff689d89f16a320c8b214ce5c9c140af2096ef9b2e04f588679b4a4b0b3c967f073eee45258f97165b0b2e6b72cd1c10bd823f1e18b1ec9bfa633c54dccf7947d80c34d98b02e7d28db997fd532fef7d9a850adfe86f5a70d201e081b"}, {0x48, 0x11b, 0xedf, "4bc6bdc21f142776a60d79c521d6d3c4338e7777dd4d269c6f0ec82c3553d9d120f0508d5dfc49fca41a9c61db514cabf91f9e107187dd"}], 0xf8, 0x0}, 0x40) r1 = syz_open_dev$binder(&(0x7f00000d5000-0xd)="2f6465762f62696e6465722300", 0x0, 0x803) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f0000a08000)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x1c, 0x0, &(0x7f0000004000-0x24)=[@register_looper={0x630b}, @increfs_done={0x40106308, 0x80000000, 0x1}, @enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/02 23:46:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000e44000)="2f6465762f6175746f667300", 0x101000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000044c000-0x4)=0x1, 0x4) keyctl$join(0x1, &(0x7f000033f000)={0x73, 0x79, 0x7a, 0x3, 0x0}) clone(0x0, &(0x7f0000b9c000+0xedc)="6e69", &(0x7f0000c49000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f000078e000)="") pipe(&(0x7f0000f3e000)={0x0, 0x0}) vmsplice(r3, &(0x7f00007a0000)=[{&(0x7f0000649000-0x78)="24", 0x1}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00006ca000-0xe8)={{{@in=@multicast2=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000362000)=0xe8) sendto$packet(r2, &(0x7f000028e000)="", 0x0, 0x10, &(0x7f0000a06000)={0x11, 0x1d, r5, 0x1, 0x80000001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x14) bind$alg(r4, &(0x7f0000fe8000-0x58)={0x26, "6165616400000000000000000000", 0x0, 0x0, "67636d28616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c90000-0x18)={r3, &(0x7f00003a4000-0x7b)="24e604f86325e94b4ec829ef30a4edb2a6afe9651a2318b03a2d4e66945ef9eb8a01fe80ad222c29ce3017d62f02e4119a46c57f9b755e744bbf85990cbccca4f46df254edb8a2bfa7680b1d37258ba2b477e1cef1ea3117f0d6d243c5f2a888013bf702282b4469a84505af6528f20d4524b2762ffa7d36f251cb", &(0x7f00004bc000)=""}, 0x18) flistxattr(r0, &(0x7f00009bd000-0xd4)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd4) splice(r2, 0x0, r2, 0x0, 0x5ad, 0x6) r6 = accept$alg(r4, 0x0, 0x0) close(r6) r7 = shmat(0x0, &(0x7f0000c1c000/0x4000)=nil, 0x1000) shmdt(r7) 2017/12/02 23:46:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000-0x10)={0x8, 0x4, 0x8, 0x0, 0x0}, &(0x7f00007c4000-0x2)=0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000eef000)=0x0, &(0x7f0000000000)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) accept$inet(r0, &(0x7f00002aa000-0x10)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f79000)=0x10) bind$alg(r1, &(0x7f0000d93000)={0x26, "736b636970686572000000000000", 0x40000000, 0x0, "637472286165732d6165736e69290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000de9000)=0x0, 0x80000) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000f7c000-0x78)={0x8, {0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x202, 0x1634, 0x9, 0x6, 0x39dc, &(0x7f0000245000)=@generic="56ee16e01208ba10b6bff56610da1cfd", 0x8000, 0x2, 0x3ddd}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000394000)={0x0, 0x69, "a2eb0306bd2645118489440c68ea53ea4015cd7c9f3db11f458f04f352094fb61013de39da28b0ee3d17298b9c699d0dac7028a98823fc67b326c254d38acddca5df4ee21487cd78aec7489ec58044109f5e36590565ea57d982608add484be79c633826be0bddbd1b"}, &(0x7f0000f7a000)=0x71) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000f7b000-0x18)={r3, 0x9, 0x20, 0x6, 0x100000000}, &(0x7f0000f7a000)=0x18) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r1, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f00001b9000)="767ce8bb48d24cda6a084796e2ca9b21b8d518299fa4459cfaa75647618ab065d83d9871077a32eb005320023f6f7fe83d7e0255c99a778186cd4423f04f8df1d9a4f80644e1285faddb7805bca842e55f50a5904626301f7b89486864709dea5b7d310200e910594f961ad9ba1b5145ce7ed3b8da7ee833e5530d27c4847a0b6fed421d6dc1a49c6574ea50bfac55c3651cea354e0006742a2491a403a5476e60bbc94054bf9d14f78e5847e5bd679fa862da453a7617d1339ff8e9c281", 0xbe) sendmsg$alg(r4, &(0x7f0000630000)={0x0, 0x0, &(0x7f0000f79000-0x10)=[{&(0x7f000004c000-0x1000)="5dfbc33dc19cb870843df30273b381faa8d62a74eac93d925f73147683c80e60337191a58df0c2c6d5b870ca6e04caf41eab5e606a5400ab3f2b56cfac84401200885e8ed098aa6615ba7d2e3a545e7c9ebb48843f0a661147644288ac33c034e21d9866cea316441b3fca929425ac31ac96fae38c279faa18cbd3fc292aab32de885d749af3db389d1e128e78080b2c002a5fa9c8ab59ac3aaa0344849a0616e811f092ef32d156b4db5b36b9689437da01e8f96d5a7b9433602bc3599891129d5aa3b884cd915f012bf405463eef858d87497df96935bd9f53c734c18b298ad7a9b378e8c54c28a89ea57a5945afd1b23f6a459937269a106e467a29766cbe0cc96fd306d687db2f133084745ea573f3263919881234d93ac54de65ec1911312fa2b2afc9b165e5d8ab86782eff4fcfb00a1236386283f41e0954740ab7514c850126c407fe287ec7a9176f3b2ccdd5b970148846188ff57ce85c45163af7dabcf897f358a20e719c69cd0c893c361dd8f5f5d865aa8324be576acb66024b46075af6742d5f44bf34c862f4fee232c5d64c5be176d4f7d422e69b7e5ca45be4cca3e6ae04d902f4d4fbd3c61378d03d7848e1ed665f7e5a7cfe39c7bb1d850cf188892305fdc51f32bc722d22b01f97789d19fcb6d7bf043fb79fede427f4339c5e70fb53df815ed0ed86c295ba5c8127be83c025fc05e5f2e782191606c463f77fc5cbab63d197871855823c3b79245a293621814c7c11353519575a8b9b65a149278a1a4a8f699ee0f7b4c3a294ba6202baf494b8a3158513fab94b982e22a138544c9db8afdf9f71ab9307f23710634ca6c7f7a023276eb8f9530a86329d81ed4c2e43dd10d3d4bd0f978d25d5854d5437448721d7f5a2e3d1f99d7f3f6d36e35ed4d49217debbcafe5b081554360bfd519bc42813377491b33b3900024b5bbf29557c1d36538bf5ca30b4347e379944e7d75465fd79490d86a70226c70216feb5cc2edaa1325726278c127e284e6c9fb14b9cf09f51dc627f14c7d5ddf82d4fe6c92a7a5180e5689f207ea6e806d996fafbb0eea32c0f1525d0630728ed9020ed76ed3b57439ba6532892597474728716ab6364a707aa434def1b5d654ede85a1730a973c9ec085998d4642d473da3918be2d761484a6123d10775c500f55a981374957432cffecc98f1438a342294591f7bef759a6c3f71432f9d3d303a7507d14307563146a76f03f3d61b565011385cd418160bd28b312fba09e670527fff400f5ed17b091295bf0f8dd3eff7749299747688625d8003ef9126961d93732b16989eca6dad08bf0fe57f6d5bbbb60377f7e0c12b33bd84ae07bbc1f2b303138308952e789e3060a0fd338349ff80cc72b76a20f6f89c1e19d9e6dc43f995313deaad1bfd41a3f577df70aabb43479315d9e224e746770e6fbd4ca9bb4aab044ffd4c3d37827d2eb395943349136721e43d66b95d441d57e0e36175675fcfbaa1c993873d9b41c7060af2af4ddebe872684ab99b7c4660737da54a8670c25b346c8daec4f5622cd4d2dac3dd87cdd979b7334f3d361481f5df85d89c9ac1ff013d5b809ee0cf1989507e73083d2ced81fe50ac86985983de5acad8d766ae28ad9017d0fb0fae1067d69e3558d917d2e488b9a9029cc48be29789270fe037cb85c74fe73825a783a346fb4979c525edfab909bd140583d9df0b848a9467a8f78e8b5c8edfe7604b6fc80651315c7f7775cf6251589a7db50f978f12a56b8356e1abbd8e80bb2a881cf9a2e293c02cfaeed7f6be192465dd7a907e094607736ddead6ad475da7a31b19b2042f225098297a965c23d2c75ae89ed5010454b9fec4e3d1e779ded0a6961907c6e55c305ae37471d388a504c332138468d13121dd2a1acd2ac4a80d4d590e2249d415007cd56e55b30dac40a980d47d9f3a16da8ab4066f29a82d8ec67aa88290a5d0f11d89a7491f28849340d0894bdd3c1d6b2de509c959d3b572de30114ad9f4ca19fc6d6cb062c55a111db30df32fe44ae72991a3de00cd602898e1b06d03c693935c9c334ce999dfc2ccbb6ad1ade5d212592f23b2e6cd17e8c84191c6d49ff958b2ec4d01ccd4bf8aa734710667d56594c73787bbc7a11f9c3c9b5f874be021cb4acee290443b468cb69813f6304cbcb02de5478b4ad88f9b066dbc29743b4f177baed4ca97d87b1b2b5122d573f6e326641c3110c4d5c20227fbe5d2594a04d586717b4ef1dd727aefbf6fffe409dff26198ce228cd0ca49fa3a12832e231579b5f204fcf2120a201bbd165acb051ec105ccd2bb93ea8f2a6f5d1569b0e94d7efc6ef16c2886ed4ae6a65e0af8f704a0acbf533ad15dc4c55a47da7cfa2b1adcf2546ab56310981c79160a65f24001f0cc4336479db11c7cdf6ae0ba300760287ec504d7d2d32ea848f5da0df7cc73", 0x6c0}], 0x1, &(0x7f0000f78000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x100}], 0x30, 0x4000041}, 0x40) recvmsg(r4, &(0x7f0000b2e000-0x38)={&(0x7f00007ec000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000f75000)=[{&(0x7f000088c000-0x11)="0000000000000000000000000000000000", 0x11}, {&(0x7f000074b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f0000f12000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000f75000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe4}], 0x4, &(0x7f0000ec7000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b, 0xffffdffb}, 0x2021) socket$inet_tcp(0x2, 0x1, 0x0) 2017/12/02 23:46:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003d0000)="2f6465762f736e642f74696d657200", 0x0, 0x200000) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000ff8000-0xb0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000001f, &(0x7f000081b000-0x4)=0x8001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000b09000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000135000)="00", 0x1, 0x20000002, &(0x7f000025e000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f0000622000-0x1002)="bfc96cec7b2ac5ec8e4177a69a413350b2e2ac4be39cc0ed3511e02268289233ce81742e205845ed96636a3659d08e173aff6f4c629da79cda907c271b1f23fa204067b4ef44f9a1e65f9c6b332d07d24ed2b66af3f717c774681583c9bb1c6a5a9250bee3f5d02d4a6c52726b2001fbb77b81cfda894d3263ec3b37edc6b64c7a1a986c582244dc4dcbcf68b3479f38e51d0d5e7a659eeea42833b15b17eaf02ac5d358e6ba31820f51f403856d0b1fa01d4a74d6bea9d0235606d9344eaa60", 0xc0, 0x8000000000000000, &(0x7f00004bf000)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$inet(r1, &(0x7f0000ffc000-0x1)="0000", 0x2, 0x2, &(0x7f00002c8000-0x10)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 93.443978] QAT: Invalid ioctl [ 93.489821] binder: 8934:8937 ERROR: BC_REGISTER_LOOPER called without request [ 93.497315] binder: 8934:8937 BC_INCREFS_DONE u0000000080000000 no match [ 93.504636] binder: 8934:8937 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 93.526913] binder: 8934:8937 ERROR: BC_REGISTER_LOOPER called without request [ 93.534363] binder: 8934:8937 BC_INCREFS_DONE u0000000080000000 no match [ 93.541269] binder: 8934:8937 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 246.752189] INFO: task syz-executor1:8903 blocked for more than 120 seconds. [ 246.759465] Not tainted 4.15.0-rc1-mm1+ #29 [ 246.764307] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.772520] syz-executor1 D25944 8903 3348 0x00000004 [ 246.778154] Call Trace: [ 246.780743] __schedule+0x8eb/0x2060 [ 246.784455] ? trace_event_raw_event_lock+0x340/0x340 [ 246.789640] ? __sched_text_start+0x8/0x8 [ 246.793784] ? check_preempt_wakeup+0x426/0xb20 [ 246.798462] ? find_held_lock+0x39/0x1d0 [ 246.802540] schedule+0xf5/0x430 [ 246.805892] ? __mutex_lock+0x703/0x1a80 [ 246.809978] ? __schedule+0x2060/0x2060 [ 246.813951] ? lock_release+0xda0/0xda0 [ 246.817929] ? memset+0x31/0x40 [ 246.821202] ? do_raw_spin_trylock+0x190/0x190 [ 246.825783] ? debug_mutex_free_waiter+0x1b0/0x1b0 [ 246.830706] ? mutex_destroy+0x1d0/0x1d0 [ 246.834782] schedule_preempt_disabled+0x10/0x20 [ 246.839535] __mutex_lock+0xaad/0x1a80 [ 246.843426] ? lo_ioctl+0x8b/0x1b90 [ 246.847058] ? mutex_lock_io_nested+0x1900/0x1900 [ 246.851908] ? futex_wake+0x680/0x680 [ 246.855706] ? lock_downgrade+0x980/0x980 [ 246.859860] ? perf_trace_lock+0xd6/0x900 [ 246.863999] ? __lock_acquire+0x6e9/0x47f0 [ 246.868276] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.873469] ? drop_futex_key_refs.isra.14+0x63/0xa0 [ 246.878594] ? lock_downgrade+0x980/0x980 [ 246.882756] ? avc_has_extended_perms+0xef/0x12c0 [ 246.887599] ? lock_release+0xda0/0xda0 [ 246.891599] mutex_lock_nested+0x16/0x20 [ 246.895659] ? mutex_lock_nested+0x16/0x20 [ 246.899898] lo_ioctl+0x8b/0x1b90 [ 246.903360] ? loop_clr_fd+0xb50/0xb50 [ 246.907248] blkdev_ioctl+0x1759/0x1e00 [ 246.911213] ? lock_downgrade+0x980/0x980 [ 246.915358] ? blkpg_ioctl+0xb20/0xb20 [ 246.919241] ? avc_ss_reset+0x110/0x110 [ 246.923216] ? lock_release+0xda0/0xda0 [ 246.927186] ? __lock_is_held+0xbc/0x140 [ 246.931280] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 246.937162] ? get_unused_fd_flags+0x190/0x190 [ 246.941748] ? rcu_note_context_switch+0x710/0x710 [ 246.946681] block_ioctl+0xea/0x130 [ 246.950312] ? blkdev_fallocate+0x3b0/0x3b0 [ 246.954627] do_vfs_ioctl+0x1b1/0x1530 [ 246.958512] ? _cond_resched+0x14/0x30 [ 246.962397] ? ioctl_preallocate+0x2b0/0x2b0 [ 246.966806] ? selinux_capable+0x40/0x40 [ 246.970866] ? SyS_futex+0x269/0x390 [ 246.974594] ? security_file_ioctl+0x89/0xb0 [ 246.978996] SyS_ioctl+0x8f/0xc0 [ 246.982369] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 246.987114] RIP: 0033:0x4529d9 [ 246.990298] RSP: 002b:00007f4b4f090c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 246.997997] RAX: ffffffffffffffda RBX: 00007f4b4f091700 RCX: 00000000004529d9 [ 247.005269] RDX: 0000000000000016 RSI: 0000000000004c06 RDI: 0000000000000015 [ 247.012536] RBP: 0000000000a6f880 R08: 0000000000000000 R09: 0000000000000000 [ 247.019803] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 247.027066] R13: 0000000000a6f7ff R14: 00007f4b4f0919c0 R15: 0000000000000002 [ 247.034355] [ 247.034355] Showing all locks held in the system: [ 247.040686] 2 locks held by khungtaskd/674: [ 247.045035] #0: (rcu_read_lock){....}, at: [<000000001fc41b7c>] watchdog+0x1c5/0xd60 [ 247.053101] #1: (tasklist_lock){.+.+}, at: [<00000000bddd8bd6>] debug_show_all_locks+0xd3/0x400 [ 247.062138] 2 locks held by getty/3058: [ 247.066108] #0: (&tty->ldisc_sem){++++}, at: [<000000009eccb45e>] ldsem_down_read+0x37/0x40 [ 247.074805] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000bdc24398>] n_tty_read+0x2f2/0x1a10 [ 247.084090] 2 locks held by getty/3059: [ 247.088060] #0: (&tty->ldisc_sem){++++}, at: [<000000009eccb45e>] ldsem_down_read+0x37/0x40 [ 247.096728] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000bdc24398>] n_tty_read+0x2f2/0x1a10 [ 247.106026] 2 locks held by getty/3060: [ 247.110004] #0: (&tty->ldisc_sem){++++}, at: [<000000009eccb45e>] ldsem_down_read+0x37/0x40 [ 247.118711] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000bdc24398>] n_tty_read+0x2f2/0x1a10 [ 247.128028] 2 locks held by getty/3061: [ 247.131986] #0: (&tty->ldisc_sem){++++}, at: [<000000009eccb45e>] ldsem_down_read+0x37/0x40 [ 247.140695] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000bdc24398>] n_tty_read+0x2f2/0x1a10 [ 247.149986] 2 locks held by getty/3062: [ 247.153948] #0: (&tty->ldisc_sem){++++}, at: [<000000009eccb45e>] ldsem_down_read+0x37/0x40 [ 247.162617] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000bdc24398>] n_tty_read+0x2f2/0x1a10 [ 247.171895] 2 locks held by getty/3063: [ 247.175861] #0: (&tty->ldisc_sem){++++}, at: [<000000009eccb45e>] ldsem_down_read+0x37/0x40 [ 247.184524] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000bdc24398>] n_tty_read+0x2f2/0x1a10 [ 247.193800] 2 locks held by getty/3064: [ 247.197760] #0: (&tty->ldisc_sem){++++}, at: [<000000009eccb45e>] ldsem_down_read+0x37/0x40 [ 247.206427] #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000bdc24398>] n_tty_read+0x2f2/0x1a10 [ 247.215716] 1 lock held by syz-executor1/8903: [ 247.220287] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<0000000020f25b7a>] lo_ioctl+0x8b/0x1b90 [ 247.228872] 1 lock held by syz-executor2/8898: [ 247.233443] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<0000000020f25b7a>] lo_ioctl+0x8b/0x1b90 [ 247.242031] 1 lock held by syz-executor2/8918: [ 247.246603] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<0000000020f25b7a>] lo_ioctl+0x8b/0x1b90 [ 247.255183] 1 lock held by blkid/8908: [ 247.259061] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<0000000020f25b7a>] lo_ioctl+0x8b/0x1b90 [ 247.267660] 1 lock held by syz-executor4/8925: [ 247.272232] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<0000000020f25b7a>] lo_ioctl+0x8b/0x1b90 [ 247.280814] 1 lock held by syz-executor4/8930: [ 247.285415] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<0000000020f25b7a>] lo_ioctl+0x8b/0x1b90 [ 247.293993] [ 247.295617] ============================================= [ 247.295617] [ 247.302621] NMI backtrace for cpu 1 [ 247.306248] CPU: 1 PID: 674 Comm: khungtaskd Not tainted 4.15.0-rc1-mm1+ #29 [ 247.313398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.322714] Call Trace: [ 247.325271] dump_stack+0x194/0x257 [ 247.328870] ? arch_local_irq_restore+0x53/0x53 [ 247.333504] ? debug_show_all_locks+0x2f4/0x400 [ 247.338144] ? nmi_cpu_backtrace+0x1be/0x210 [ 247.342525] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 247.346986] nmi_cpu_backtrace+0x1d2/0x210 [ 247.351188] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 247.355649] nmi_trigger_cpumask_backtrace+0x122/0x180 [ 247.360895] arch_trigger_cpumask_backtrace+0x14/0x20 [ 247.366050] watchdog+0x90c/0xd60 [ 247.369485] ? reset_hung_task_detector+0xa0/0xa0 [ 247.374294] ? default_wake_function+0x30/0x50 [ 247.378853] ? __schedule+0x2060/0x2060 [ 247.382792] ? do_wait_intr+0x3e0/0x3e0 [ 247.386736] ? do_raw_spin_trylock+0x190/0x190 [ 247.391287] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 247.396360] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 247.401342] ? trace_hardirqs_on+0xd/0x10 [ 247.405456] ? __kthread_parkme+0x175/0x240 [ 247.409746] kthread+0x37a/0x440 [ 247.413078] ? reset_hung_task_detector+0xa0/0xa0 [ 247.417884] ? kthread_stop+0x7b0/0x7b0 [ 247.421826] ret_from_fork+0x24/0x30 [ 247.425569] Sending NMI from CPU 1 to CPUs 0: [ 247.430079] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 247.431061] Kernel panic - not syncing: hung_task: blocked tasks [ 247.431066] CPU: 1 PID: 674 Comm: khungtaskd Not tainted 4.15.0-rc1-mm1+ #29 [ 247.431069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.431071] Call Trace: [ 247.431078] dump_stack+0x194/0x257 [ 247.431088] ? arch_local_irq_restore+0x53/0x53 [ 247.431098] ? vsnprintf+0x1ed/0x1900 [ 247.431110] panic+0x1e4/0x41c [ 247.431116] ? refcount_error_report+0x214/0x214 [ 247.431131] ? nmi_trigger_cpumask_backtrace+0xef/0x180 [ 247.431143] watchdog+0x91d/0xd60 [ 247.431161] ? reset_hung_task_detector+0xa0/0xa0 [ 247.431167] ? default_wake_function+0x30/0x50 [ 247.431182] ? __schedule+0x2060/0x2060 [ 247.431186] ? do_wait_intr+0x3e0/0x3e0 [ 247.431196] ? do_raw_spin_trylock+0x190/0x190 [ 247.431203] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 247.431211] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 247.431218] ? trace_hardirqs_on+0xd/0x10 [ 247.431223] ? __kthread_parkme+0x175/0x240 [ 247.431233] kthread+0x37a/0x440 [ 247.431238] ? reset_hung_task_detector+0xa0/0xa0 [ 247.431241] ? kthread_stop+0x7b0/0x7b0 [ 247.431250] ret_from_fork+0x24/0x30 [ 247.547367] Dumping ftrace buffer: [ 247.551054] (ftrace buffer empty) [ 247.554732] Kernel Offset: disabled [ 247.558330] Rebooting in 86400 seconds..