[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 2017/08/28 09:15:42 fuzzer started 2017/08/28 09:15:42 dialing manager at 10.0.2.10:46084 2017/08/28 09:15:53 executing program 0: 2017/08/28 09:15:53 executing program 1: 2017/08/28 09:15:53 executing program 2: 2017/08/28 09:15:53 executing program 3: 2017/08/28 09:15:53 executing program 4: mmap(&(0x7f0000000000/0xf86000)=nil, 0xf86000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000f86000)="220000001a0007000080000f090007000a000cebfeffa7001a00ffff05000901be45", 0x22) fcntl$setflags(r0, 0x2, 0x1) mmap(&(0x7f0000033000/0x3000)=nil, 0x3000, 0x3, 0x40050, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x3e, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ed9000/0x4000)=nil, 0x4000, 0x2000006, 0x40111, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x72, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1f0000)=nil, 0x1f0000, 0x3, 0x110, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e63000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001f0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x2, 0x9, &(0x7f00001f0000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00001f0000/0x1000)=nil, 0x1000, 0x1, 0x1d, r1, 0x3) mmap(&(0x7f0000f87000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f88000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000f88000)={0x8, [0x9, 0x8000, 0x42, 0x40, 0x9, 0x7f, 0xffffffff, 0x6]}, 0x14) socketpair$inet(0x2, 0x1, 0x800000003ff, &(0x7f000064d000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00001aa000/0x3000)=nil, 0x3000, 0x8000003, 0x10, 0xffffffffffffffff, 0xfffffffffffffffe) mmap(&(0x7f00007a5000/0x3000)=nil, 0x3000, 0x1, 0x32, r2, 0x0) mmap(&(0x7f0000e64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001f1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000107000/0x1000)=nil, 0x1000, 0x3, 0x58010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xffffffffffffffff, 0x1b071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf60000)=nil, 0xf60000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000f60000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x5, 0x0, &(0x7f0000f60000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0xa, 0x4) 2017/08/28 09:15:53 executing program 5: mmap(&(0x7f0000000000/0xef4000)=nil, 0xef4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x30) r2 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000220000)={r0, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000ef4000)={r2, r1}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000c35000)={@generic="0b85f2454119bb38578bd3b71f60dbf9", @ifru_addrs={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000ef5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000ef5000)={r2, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00004be000)={@generic="c4ff254d4034d109c2e3e2fce4cdbde9", @ifru_addrs={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r3 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000ef5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netlink(r3, &(0x7f0000ef6000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000c17000-0x4)=0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000b25000-0x4)={r2}) close(r2) 2017/08/28 09:15:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create(0x201) set_mempolicy(0x8000, &(0x7f00006e9000-0x8)=0x8, 0xe0) unshare(0x20001) migrate_pages(0x0, 0x100000000, &(0x7f0000aeb000-0x8)=0x8, &(0x7f0000aea000)=0x18) pread64(0xffffffffffffffff, &(0x7f0000640000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf7, 0x0) r0 = syz_open_dev$loop(&(0x7f000030d000-0xb)="2f6465762f6c6f6f702300", 0x4000100, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffa, 0xe) fdatasync(r0) 2017/08/28 09:15:53 executing program 7: r0 = socket$inet_sctp(0x2, 0x800004, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f000085e000)="2f6465762f6c6f6f702300", 0x0, 0x40000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bb3000-0xb)="2f6465762f6877726e6700", 0x10080000600803, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000b20000+0xd8d)="62ffb6b8d88636200040ad02d49913e152a357d81739a7e8bb065f6300005b75af44009a91a93b9c2a422b5101fd513ccd7453cf86ef8d92c60666f97c06f316e8f81dea7c8db80000000000000000f997b9ae4c56fa15224a7b75f4fa252eb66025ce6f63f2fc1ff1c3ee7e", 0x6c, 0x800, &(0x7f000011e000-0x10)={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xf8f000)=nil, 0xf8f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) chmod(&(0x7f00007a6000)="2e2f66696c653000", 0x0) r3 = syz_open_dev$loop(&(0x7f000091e000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x80080002) r4 = creat(&(0x7f0000f8a000)="2e2f66696c653000", 0x2) ioctl$TCSETA(r4, 0x5402, &(0x7f0000ac4000)={0xfc, 0x7ffffffc, 0x301, 0x4, 0x4, 0x0, 0x3e00, 0x9, 0x9, 0x8}) socket$unix(0x1, 0xd784ec3cfb636153, 0x0) r5 = memfd_create(&(0x7f0000f8b000)="00", 0x2) setxattr(&(0x7f000094f000)="2e2f66696c653000", &(0x7f000055c000-0x1a)=@known="636f6d2e6170706c652e73797374656d2e536563757269747900", &(0x7f0000b45000-0x9)="6e6f64657647504c00", 0x9, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwritev(r5, &(0x7f000060c000-0x60)=[{&(0x7f0000ae7000-0x1000)="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", 0x800}, {&(0x7f0000767000-0x3b)="86dadbf8c24f682370fbe430709f16c923c6fbf9c458c6b753003a18c8be9146ad6c3ad34a9c5fe73de694537c503b43e221126186619b089a727a", 0x3b}], 0x2, 0x3) perf_event_open(&(0x7f00000fa000)={0x5, 0x78, 0x4f, 0x638000000, 0x100, 0xbe, 0x0, 0x10001, 0x1, 0x7, 0x7f, 0x9, 0xffffffffffffff76, 0x1, 0x0, 0x8, 0x2, 0xffffffffffffffe0, 0x4, 0x40, 0x20, 0xfffffffffffffe00, 0x7, 0x5, 0x2, 0x1, 0x0}, 0x0, 0x0, r2, 0x6) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f000088b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0], 0x0}) sendfile(r3, r3, &(0x7f00000de000-0x8)=0x0, 0x100000001) ioctl$KDENABIO(r2, 0x4b36) r6 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r6, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, &(0x7f00007ce000)=0x0, 0x80a, 0x2) 2017/08/28 09:15:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffe) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000ad0000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000001000-0xb5)="f07bd508dd9f2d7db720a586dbc202700933f338ac3e43329c34af520dee06b18a5d0e22fec85af63921fe93052afe2147552edc61181833f6846c1be73ec4bbbdd42c553d81439cb5adb6097c35e92aaceb2290dca53fbb92792f7a4fcf98e0d157bfeb925e022869445de6f5d0dc59b9d58b2654b59e35b433762d2bcc696b9b5e9fd29329a1a0cfb5a4a58937af15c0ee7b94533c3ecb7db0eb7b4f30dba483f1607d76938e2ffc92b3ded235ad488716b4d236", 0xb5, 0x20000004, &(0x7f0000001000)={0xa, 0x1, 0x3, @loopback={0x0, 0x1}, 0x8}, 0x1c) r2 = socket(0x17, 0x1, 0x6) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000002000-0xb)={0x8000, 0x0, 0x4000, 0x8, 0x7, 0x7, 0x9, 0x7ff, 0xd366, 0x9, 0x9}, 0xb) r3 = socket$inet(0x2, 0x10002, 0x5) getsockopt$inet_int(r3, 0x0, 0x16, &(0x7f000081b000-0x4)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$inet6(r1, &(0x7f0000001000-0x1c)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000001000)=0x1c) mmap(&(0x7f0000000000/0xf0b000)=nil, 0xf0b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f0b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f0c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f0d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f0e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r3, 0x0, 0x0, &(0x7f0000427000)=0x0, &(0x7f0000a0b000)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000060b000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffff00, 0x2, 0x0, 0x4, 0x0, 0x5, 0x891}, 0x20) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000efa000)={0x0, 0x0}, &(0x7f0000ee1000-0x4)=0x10) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f000017f000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f0b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f0e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000cdf000)=0x10001, &(0x7f0000f0e000)=0x4) mmap(&(0x7f0000f0e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000f0e000)={0x0, 0x1}, &(0x7f0000efa000)=0x8) mmap(&(0x7f0000f0e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000f0e000)={r5, 0x1}, 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000f0b000)=0x9, 0x4) 2017/08/28 09:15:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000af3000)="", 0x0, 0x0, &(0x7f0000ee8000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000333000)={0x0, 0x0}, &(0x7f00006bf000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000d99000-0x8)=@assoc_value={0x0, 0x5}, &(0x7f000050f000-0x4)=0x8) clone(0x0, &(0x7f0000c41000)="", &(0x7f0000f13000)=0x0, &(0x7f0000531000)=0x0, &(0x7f0000001000-0x1)="") pipe(&(0x7f0000d56000-0x8)={0x0, 0x0}) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000375000-0xab)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") socket$inet_tcp(0x2, 0x1, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000044000/0x2000)=nil) r2 = socket(0x1e, 0x4, 0x0) sendmsg(r2, &(0x7f00001ff000)={&(0x7f00004ae000+0xb5c)=@generic={0x10000000001e, "0100008000000000d9955b9ce526cc573c5bf81e483724c76c14dd6a739effea1b86286be61ffe06d79f00000000000000076c3fac85b9d8f98601809b9bf3047755af50d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd456243b7634800ece70b076c360c9aecc5aa6767e2e7891dfd3fb881a1565b3b16d7436"}, 0x80, &(0x7f000024e000)=[], 0x0, &(0x7f00002d4000)=[], 0x0, 0x0}, 0x0) 2017/08/28 09:15:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa4daa23081996fda, 0x7, 0x6) r1 = memfd_create(&(0x7f0000e00000)="0619", 0x3) connect(r0, &(0x7f0000a8e000-0x1c)=@nfc_llcp={0x27, 0x7fffffff, 0x29f2, 0x10000000000007, 0xb, 0xffffffffffff8763, "16a880c43cfa6d06c7d4743c71919f9b8cc793a49a712f3f2bfa162f7ddb81a0ce4bd5c7b4c1b4a34f5a98ccaf19e9c48a67f2b8260e95e8029d0079fbda2d", 0x9}, 0x60) r2 = syz_open_dev$sndseq(&(0x7f000011c000)="2f6465762f736e642f73657100", 0x0, 0x8000000000102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x485d03be, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) stat(&(0x7f0000d76000-0x8)="2e2f66696c653000", &(0x7f0000cd0000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000abe000)={0x0, 0x0, 0x0}, &(0x7f0000071000-0x4)=0xc) fchown(r2, r5, r4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000889000-0x4c)={0xa00000000000, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(r2, &(0x7f0000817000-0x30)=[{0x22, 0x1, 0x0, 0x3fe, @tick=0x8f, {0x1, 0x0}, {0xfffffffffffffff9, 0xfffffffffffffffd}, @note={0x9, 0x0, 0x1f, 0x9, 0x7ffd}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f000024e000-0x8c)={0x0, 0xffffffffffffff01, 0x1, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000b6f000)={0x103ff, 0x0, &(0x7f000007b000/0x1000)=nil}) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00001e8000-0x4)=0xac, 0x4) geteuid() getrandom(&(0x7f00005f2000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28, 0x0) lstat(&(0x7f00004cc000)="2e2f66696c653000", &(0x7f0000a04000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000354000)=0x0, &(0x7f000088f000-0x4)=0x4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000359000)={0xfffffffffffffe00, 0x3, 0x80000000, 0x1, 0x8001, 0xfffffffffffffffc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000b1e000)={0x0, 0x9, 0x5, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000a75000-0x9)="2f6465762f76637300", 0x280080, 0x0) r7 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000155000-0x4)=0x6, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00004fb000-0x4)=0x0, &(0x7f0000289000-0x4)=0x4) connect$inet6(r7, &(0x7f00006b6000-0x1c)={0xa, 0x1, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00003e8000)={{{@in=@multicast1=0xe0000001, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x0, 0x3f, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f000005b000)=0x37, 0x4) sendmmsg(r7, &(0x7f0000a1c000)=[{{0x0, 0x0, &(0x7f0000a12000-0x10)=[], 0x0, &(0x7f000013d000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) 2017/08/28 09:15:54 executing program 3: mmap(&(0x7f0000000000/0x926000)=nil, 0x926000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x803, 0x6) sendmsg$nfc_llcp(r0, &(0x7f000077a000-0x38)={&(0x7f0000921000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "18141456ede8d75668c82707a52d0576e43179f558bd23084d6bbf8cdabebc48e8d810a3d66efc482e6e9705000000000000000303cc208a814bf82e784d04", 0x0}, 0x60, &(0x7f0000921000)=[], 0x0, &(0x7f0000921000-0x64)={0x10, 0x0, 0x1ff, ""}, 0x10, 0x0}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006b2000-0x9)="2f6465762f72746300", 0x0, 0x0) mmap(&(0x7f0000926000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$inet6(r1, &(0x7f0000926000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f00008db000-0x4)=0x1c, 0x80800) mmap(&(0x7f0000926000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000927000-0x48)={0x3, 0x0, [0x3, 0x74, 0x5, 0xfffffffffffffffa, 0x100000000, 0xffffffffffff0000, 0xfffffffffffffffb, 0xae20]}) 2017/08/28 09:15:54 executing program 0: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000e58000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0xfffffffffffffff7, {{0x2, 0x0, @rand_addr=0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0xb, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00006b9000-0x4)=0x34c, 0x4) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00003bf000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000700000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f00007b8000/0x4000)=nil, 0x4000, 0x4) bind$unix(r3, &(0x7f000055b000)=@file={0x1, "2e2f66696c653000"}, 0xa) connect$unix(r3, &(0x7f00000bc000)=@abs={0x0, 0x0, 0x0}, 0x8) r5 = accept4(r0, &(0x7f000030b000)=@un=@file={0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f000005a000-0x4)=0x37, 0x800) ioctl$sock_netrom_SIOCGSTAMPNS(r5, 0x8907, &(0x7f00008c6000)=0x0) sendmmsg$unix(r4, &(0x7f00000bd000)=[], 0x80, 0xc0) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f000088f000)=0x0, 0x80000) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000bfc000)={@rand_addr=0x0, @empty=0x0, 0x0}, &(0x7f00001c2000-0x4)=0xc) sendto$unix(r3, &(0x7f0000f9e000)="0f59e6ab2d34845fe7ff0f00000051b3322fed2771ecfd5b0eca3e12d856214a47e20c8a02486816c9ed544e6ae2f67c2a02caafe63dcc285afd565aadd95d75b5f6c9d42f2da9684d624bd0b29e4353575f1c4b029e964f39678c3036d0c6173e2a", 0x62, 0x82, 0x0, 0x0) r8 = dup3(r2, r0, 0x80000) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f0000b91000-0x38)={0x3, 0x2, [{0x2, 0x0, 0x1f}, {0x6, 0x0, 0x800}, {0x6d59a125, 0x0, 0x401}]}) pwrite64(r4, &(0x7f0000339000)="1845746f1a8cd7acf333a517c71018e41e789073051ab916011b35851596d9676035e72a8f06a854e705219c058398eabee648edfd45dcb23d3bba3d735ec71de679ac637cbe3918152ff3efb0357fe9eba3af93b7723140eeed64dc8a25fbd8b858801865128d73d8e7ad69a334a5405374108bde6d2725a6b03d384dddd7d696ac8f829d98df34fa389697cf8fe716a5f61d5702bff806885a8d8831b9543e34a16def413ce9444a7c5df4d1e48733b3371b1b4e128e1b69d3269636fad2c3e287fb8fdc59883d5df574f8", 0xcc, 0x0) connect$unix(r3, &(0x7f0000be4000-0xa)=@file={0x80000000000001, "2e2f66696c653000"}, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000fc6000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8085, r7}) getpid() recvfrom$unix(r4, &(0x7f00000dd000-0xd7)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd7, 0x20, &(0x7f0000131000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8) connect$unix(r3, &(0x7f0000681000)=@abs={0x0, 0x0, 0x2}, 0x8) close(r3) pipe(&(0x7f000089b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00007b1000)={0x2, 0x3, 0xffffffff, 0x0, 0x6, 0x0, 0x2c7d, 0x6, 0x5, 0x4, 0x2}, 0xb) 2017/08/28 09:15:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000037000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet6(r0, &(0x7f0000001000-0x1c)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f00002db000)=0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f000095e000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x0, 0x0, 0x0, 0x7724, 0x0}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000b08000-0x18)={0x1, 0x0, [{0x8b6, 0x0, 0x1}]}) 2017/08/28 09:15:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x4000000002, 0x78, 0xdb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00006ed000)="2f6465762f7667615f6172626974657200", 0x40, 0x0) perf_event_open(&(0x7f00009e6000-0x78)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x3, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000c46000)=0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000f06000)={{0x650dc220, 0x2}, "706f7274310000001c00000000000000000000000000000011000000000000000000000000000000000000480000000000000000000000000000000000000000", 0x48, 0x10001, 0x1, 0x4, 0x4, 0x7, 0x1ff, 0x0, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$ircomm(&(0x7f00005d7000-0xd)="2f6465762f6972636f6d6d2300", 0x2, 0x100000080806) ioctl$TCSETA(r2, 0x5402, &(0x7f0000b75000-0x14)={0x2, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd6, 0x10, 0x1}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000b1c000)={0x8000, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x81, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000ff6000-0x20)={0x4, 0x0, 0x10000, 0x26}) writev(r2, &(0x7f00004b0000)=[{&(0x7f0000f0c000-0x8c)="0563e4d790f3220483b3462c5c32fd619fd17c89b7ea51f26dd87c22d290fe1876cb06c712abd2537aaeab46fbb3cecf44c8e8d5f62405ad5ac749405d4ece9d98eaac07809ada9ac3730a056195a691811a91b73c0cfbd55522f5ab7aef8c51c37280c6ab4212a3267ff512e3754e4f84c39b277650ddc10460855fac5b14714f7ee97673b3c12bc2f33013", 0x8c}, {&(0x7f0000efe000)="33861196138b8b5e9c616e5c6049ab335d7153142ca8fbbf0ace1afaca72d87bdfba96b734de17ca4464e6e2c9a8add301ce088122093520cdc4d67cf86f066f65d73d4e59c04e6213419703d48f2f264bef0e5072cb0387a4fbcd1f73e09299055672cfb73b8d8f333c4ed2", 0x6c}, {&(0x7f0000c11000-0xb9)="fa2c8c7683256dbf2f8ceccdfc64923017d5b30dfd5a2ee568118d80510d91c182b189bb2e1d9039fbeef90a3b0f170407cf9244e334d7dc86bac630d894e37d300edc05850c8ff413672047fb07f165706abbcb56ac652845da241f1dda07e828718f8b87456f86b6eecd2223da2460aff0585f778ac85f4f3fc9bdf2064eb41e839607ff647017efc74d655a39b42e19bb8ee53ac163f3536e1eacf9b49e89cd0b53bc1506cd57d8616596443778808b5817afd5c20ce28d", 0xb9}, {&(0x7f0000de2000-0x7c)="50b0a64ecacc6ee405c8bb9a0ae77bcadbbffa13552c5bd85d449348ea823de9e6793d740a3796802b3f52ebd19e56e0085c88bff2c4cb8a3e961d3817c4ea33eb515b84f0582ca92de490812b5a5682e5b75ed1e915566fe27c34f67a49a19a67aa0c65632c2d776914a9a84a703ff5e2df3e26b94165cc79077bd1", 0x7c}, {&(0x7f000085d000-0x8f)="9955c818c1adddd8de70f6fc24dd43e105ab719797c47ee16511ac4d5eebc8f5638dbf4e09f2918577d886beee57909f13c381f85fc1915846ede699efe0eb725bc3abd926350e5a020d9802baee23aa43894461c6aeb1743d95eafe45e5bbafb49529a9adcc6854e914af2e134656c6da06281238fc79d1c7edb659b7b83e2bcd6abbd655b71ec6026dd845f619a3", 0x8f}, {&(0x7f000036d000-0x2d)="f343b224d00b5a6665414f72bc3e17208beb6356a60eeeee7170f7105000969533e19a9bb3357dd2b3525c71b4", 0x2d}, {&(0x7f0000c6a000-0x59)="91e7abef3fc9ed82088f630822710e13c65a2ad92e5750ee3981db1f362434b8f82d6680b90771a5f86526b18e41b900177d3879978ae5f02fb1f2bcc809c84626eeb20022c210c65e519155a7f4e92baa7099bfebddd7706e", 0x59}, {&(0x7f00005b9000)="0bce330d10df8e039ea9708a1a7cef5ba213f82a944fafda4128cef29e8999bd80525128f5b0f4e8bb05a0a6e0b102bbc82032e62ce5381f3186490f50f1bbc118948590f2f0aa55266a7fecd50ed612437908328a35fb6fc755668e6d81beb2689fea11907d17672e832ce1459eb4075e8fc05fde93aa38275e0884734044e20aff8a2b440e947ffcdd58f6007a13df5a8103a0c38d783f7b4acc660664ed0b43ff31f86cf5523faa74218a29f9676278e1531a296b907a94d0d35bd1ec2839caadd141a5a30a174a018ead36f89369c700e3afa36a9f81ae19039dbc32ba800cece91c8e5a9fe76daf2276bd4706a0e57f3eb3", 0xf4}, {&(0x7f0000d78000-0x6b)="4b4faabdffd5d97aacd6caef41d094364258918506e6d32902487daeaa47380f030c9db891e603044b5d686989318f1868e20f576a02a03852bfdae5af04838211cdb8688d8eda9939172e0a0a291924ddf8e0a715709d272a41d3eeddb9a0b9b329cdf6c89f5c8a1c00c7", 0x6b}, {&(0x7f0000071000-0x8b)="d75fed2f1317f95585830171698ac3f12f06077bac0f0a6c28c31acdb7547cb0a36a4b22f1b820a0ea88702ac94333920601a4cce268c86e3131b30ae33f198173df9e03ddbed330b68aaf24337e0c152ff7e0e1182d65e5b99810430f577b18e0a288c530da5e9ab92ca70be5598a0740a5cdc1e4f7bf6e0fd29e14da9791ff199933ef14541bc02166ee", 0x8b}], 0xa) clock_gettime(0x6, &(0x7f0000e51000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00004ff000)={0x7, 0x1, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, "0000000210c71e2f", "b08e48bfff587b50d1b957a3e546fdadf53f539f7259cc1786e454a9527a530d", 0x7, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000f3d000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") 2017/08/28 09:15:54 executing program 2: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0xa, 0x2000000000) mmap(&(0x7f0000fd8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fd9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000fd9000)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3}, {0xa, 0x2, 0x100000, @loopback={0x0, 0x1}, 0x0}, 0x10001, [0x1, 0x81, 0x1, 0x8001, 0x6, 0x8, 0x401, 0x4]}, 0x5c) fstat(r0, &(0x7f0000fd9000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) flock(r0, 0x2) mmap(&(0x7f0000fda000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fda000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x3, 0x0) mmap(&(0x7f0000fdb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000fdc000-0xb)="2f6465762f766373612300", 0x9, 0x208000) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000240000-0x4)=0x101, 0x4) r3 = dup(r0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000ee2000-0x8)={0x7fffffff, 0xbb, 0x9, 0xe269, 0x6}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f000075f000-0x6)={0x4, 0x1be, 0x1}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000fda000)={0x0, @in6={{0xa, 0x1, 0x80, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffff7fff, 0x44, 0x1, 0xcb4, 0x3}, &(0x7f0000fda000)=0xa0) mmap(&(0x7f0000fda000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000fda000)={0xa00000000000, 0x9, 0x8000, 0x0, 0x7fff, 0xffffffffffffffc0, 0x4, 0x7, r4}, 0x20) ioprio_set$uid(0xffffffffffffffff, r1, 0xfffffffffffffffa) mmap(&(0x7f0000fdb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000fdb000)=0x0) write(r0, &(0x7f0000fd3000-0x26)="260000005e0009fff10000f83a0000000000000001070000020000000000085b1ee9ff4b35ea", 0x26) syzkaller login: [ 31.409822] BUG: unable to handle kernel NULL pointer dereference at 0000000000000286 [ 31.411059] IP: 0x286 [ 31.411350] PGD 3bf54067 [ 31.411354] P4D 3bf54067 [ 31.411676] PUD 3c855067 [ 31.412009] PMD 0 [ 31.412271] [ 31.412632] Oops: 0010 [#1] SMP KASAN [ 31.412994] Dumping ftrace buffer: [ 31.413343] (ftrace buffer empty) [ 31.413698] Modules linked in: [ 31.413994] CPU: 0 PID: 5 Comm: kworker/u8:0 Not tainted 4.13.0-rc6-next-20170825+ #9 [ 31.414532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 31.415098] Workqueue: kstrp strp_work [ 31.415354] task: ffff88003ebd6140 task.stack: ffff88003ebd8000 [ 31.415747] RIP: 0010:0x286 [ 31.415945] RSP: 0018:ffff88003ebdf520 EFLAGS: 00010246 [ 31.416302] RAX: dffffc0000000000 RBX: ffff88003b6adb78 RCX: 0000000000000000 [ 31.416771] RDX: 1ffff100076d5b81 RSI: ffffffff85b37b20 RDI: ffff88003b6ada48 [ 31.417264] RBP: ffff88003ebdf538 R08: ffff88003ebdee98 R09: ffff88003ebdeea8 [ 31.417736] R10: ffff88003ebdee20 R11: 1ffff10007d7aebb R12: ffff88003b6ada48 [ 31.418215] R13: ffff88003eb76818 R14: ffff88003ebdf980 R15: ffff88003eb76800 [ 31.418685] FS: 0000000000000000(0000) GS:ffff88003ec00000(0000) knlGS:0000000000000000 2017/08/28 09:15:54 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffff9c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00008e5000)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000b0b000)=0x10) mmap(&(0x7f0000d6b000/0x3000)=nil, 0x3000, 0x9, 0x12010, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf6a000)=nil, 0xf6a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00003fb000)={0x2, 0x78, 0x9245, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000a4f000)={0x26, "6861736800000000000000000000", 0xc, 0x1000, "74776f66697368000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000d9a000)="b114", 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000deb000-0xf)="2f6465762f6472692f636172642300", 0x0, 0x0) ioctl(r3, 0xfffffffffffff4b8, &(0x7f0000d1f000-0x10)="ee011bad2b0d000000000000782a6540") r4 = syz_open_dev$vcsa(&(0x7f0000b92000-0xb)="2f6465762f766373612300", 0x0, 0xca400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000d34000-0x78)=[@in6={0xa, 0x3, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, @in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x4, @loopback={0x0, 0x1}, 0x0}], 0x6) mmap(&(0x7f00006ce000/0x3000)=nil, 0x3000, 0x2, 0x200033, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000076c000)={0xe, 0x7fff, 0x1, 0x400, 0x2}, 0x14) mmap(&(0x7f0000fc7000/0x1000)=nil, 0x1000, 0x0, 0x10010, r2, 0xffffffffffffffff) mmap(&(0x7f0000d32000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xfab000)=nil, 0xfab000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ea7000/0x2000)=nil, 0x2000, 0x800000000000009, 0x30, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fab000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$llc(r4, &(0x7f0000fab000+0xd0f)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000fab000)=0x10, 0x800) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f000029f000)={0xa8f}, 0x4) mmap(&(0x7f0000fac000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000fad000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept$unix(r5, &(0x7f000016b000-0x14)=@file={0x0, "000000000000000000000000000000000000"}, &(0x7f000054f000)=0x14) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000882000-0xf6)="b9647ff8a64290a3399efdc6b12ee8ae071a057c1a2c3b8ed82193dad54f4aef0896161bd144589d8463bfce9ff12a91573893026df5dcbd8912c8bb971d028c6b84127bdc90e81707d4785f496271cbbd798687a67bf86ee9949783e183020bac49c5941aeb9e9bef5d66b33028159fcdec3ed0bd0e75ccd908d0511e41846a57739286f230f4a0e018477e03aad36515efbeb11b6266d399cf6de2e6e0578eb695a0dce99eb2d130465597b0f81e31ed74da8ca33c9a6097f00682b954bad03ba4f7a0074045066764ca92505b78a52e088b3bb1171f354f19cbb3784ce9ba871aeb92a09eaaefb8e2c04c3191b2afd82bd8e2db93") r6 = socket(0x2, 0x4000000000000003, 0x2) setsockopt(r6, 0xff, 0x1, &(0x7f0000237000)="", 0x0) [ 31.419228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.419756] CR2: 0000000000000286 CR3: 000000003967f000 CR4: 00000000000006f0 [ 31.420297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.420801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.421267] Call Trace: [ 31.421450] ? strp_work+0x41/0xf0 [ 31.421683] process_one_work+0xbfd/0x1be0 [ 31.421957] ? check_noncircular+0x20/0x20 [ 31.422241] ? pwq_dec_nr_in_flight+0x450/0x450 [ 31.422556] ? finish_task_switch+0x1d3/0x740 [ 31.422846] ? finish_task_switch+0x1aa/0x740 [ 31.423151] ? perf_trace_lock_acquire+0xfe/0x900 [ 31.423473] ? __sched_text_start+0x8/0x8 [ 31.423746] ? perf_trace_lock+0x860/0x860 [ 31.424032] ? find_held_lock+0x39/0x1d0 [ 31.424311] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 31.424684] ? lock_acquire+0x1d5/0x580 [ 31.425023] ? worker_thread+0x4a3/0x1860 [ 31.425380] ? lock_release+0xd70/0xd70 [ 31.425649] ? do_raw_spin_trylock+0x190/0x190 [ 31.425946] ? retint_kernel+0x10/0x10 [ 31.426205] worker_thread+0x223/0x1860 [ 31.426484] ? process_one_work+0x1be0/0x1be0 [ 31.426776] ? check_noncircular+0x20/0x20 [ 31.427055] ? _raw_spin_unlock_irq+0x27/0x70 [ 31.427347] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 31.427743] ? trace_hardirqs_on+0xd/0x10 [ 31.428029] ? finish_task_switch+0x1d3/0x740 [ 31.428326] ? finish_task_switch+0x1aa/0x740 [ 31.428636] ? preempt_notifier_dec+0x20/0x20 [ 31.428944] ? __schedule+0x8f0/0x2070 [ 31.429213] ? try_to_wake_up+0xf9/0x1600 [ 31.429494] ? find_held_lock+0x39/0x1d0 [ 31.429799] ? lock_downgrade+0x990/0x990 [ 31.430081] ? complete+0x18/0x80 [ 31.430321] ? __schedule+0x2070/0x2070 [ 31.430614] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 31.430954] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 31.431281] ? trace_hardirqs_on+0xd/0x10 [ 31.431560] ? __kthread_parkme+0x173/0x240 [ 31.431864] kthread+0x39c/0x470 [ 31.432442] ? process_one_work+0x1be0/0x1be0 [ 31.432817] ? kthread_create_on_node+0x100/0x100 [ 31.433192] ret_from_fork+0x2a/0x40 [ 31.433503] Code: Bad RIP value. [ 31.433792] RIP: 0x286 RSP: ffff88003ebdf520 [ 31.434152] CR2: 0000000000000286 [ 31.434440] ---[ end trace 2a481e20867eead0 ]--- [ 31.434829] Kernel panic - not syncing: Fatal exception [ 31.435347] Dumping ftrace buffer: [ 31.435638] (ftrace buffer empty) [ 31.435956] Kernel Offset: disabled [ 31.436256] Rebooting in 86400 seconds..