SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000494000)={r5, 0xf3, "87aa30441d18d2838ce3e80ba95eb220845421674636c915a2643408bff8353fd3cb679308b5145e91986d554c704d02ca1252da09e6e15afc90af479f99812247bad6a3c79684ee1320aadc0f3fa00c035c8e35de1bc04dd14980f56bb4c65d3968df3f381f894318beff59717e72de9693c46b496eacb14caf149915e5fdd69e76e4d3c89d8db7d95485653db16f65a4517122ec782aea4015509666dafcf5792af7db8669662546520b504f216e2ddd428eddbd4d30a2350012ba30503dbb0add36829817966a0085878206b17169ce0f9030c721387f43878dc9f3577d58966f4cb2b99eca9421480154d9ce4a6ce852d3"}, &(0x7f0000a2b000)=0xfb) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00007d6000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000eda000)=0x8) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:44 executing program 5: r0 = memfd_create(&(0x7f000030c000)="00", 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000001000-0x1)="00") ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001000-0x4)=0x7f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80002, 0x7, &(0x7f0000110000)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000093f000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00004bf000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3, r2}) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() write(r0, &(0x7f000067c000-0xb3)="ce221b83d36d4e0e34f3ffdf07a246e5718922ee431e30e22bf10aa1d014a3b7d106fbe6f0fde091c49c800f3f6c05c00aaebe20b3c565ae8581745f9304a2bcb508a3affccb9d2bcb46f7fc37fd5f939e56cfb946dba95195b934848a683f9832b7f74c0c275ed8e082f4ea26f6a95a4c870c4811a5d05e94fdc1050b194164545224c61a1aca0617d2f859ef9214d9bbfb8b97b7f71c7f99f90d42dc2a481f86472303f45b40c206fe5115c5db5bb0c0d544", 0xb3) 2017/12/02 09:13:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) fallocate(r0, 0x1, 0x3, 0xde) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000-0x1c)={0xc, 0x8, 0x3a45, 0x5, 0x5, 0x0, 0x5cff8066}, 0x1c) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:44 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000374000)="2e2f66696c653000", 0x800, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000111000)={0x0, 0x0}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f000061a000)="2f6465762f6b766d00", 0x2000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000dac000-0x8)={0x0, 0x100000000}, &(0x7f0000b9a000-0x4)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00002b9000-0x8)=@assoc_value={r3, 0x6}, &(0x7f00009b6000)=0x8) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffd) getsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000a6f000-0x4)=0x0, &(0x7f00003a5000)=0x4) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000bda000)={0x6a00000000000000, 0x6000, 0x1, 0xc, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) prctl$intptr(0x3f, 0x100000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(0xffffffffffffffff, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:44 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000c16000)="2f6465762f73657175656e63657200", 0xe8a0cb560665be50, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000039000)=0x5, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000ce7000)={0x0, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x33, 0x2, 0x2, 0x100000001, 0x4, 0x6, 0x1ff, 0x7, 0x9, 0x8b, 0x6, 0x100000000000000, 0x8000000000000, 0x6, 0x3]}, &(0x7f0000b2a000-0x4)=0x108) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000bd2000-0x8)={r2, 0x7fff}, 0x8) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f000061e000)={0x9, 0x99, "11"}, 0x0) ppoll(&(0x7f00002e5000)=[{r1, 0x9466, 0x0}, {r1, 0x2006, 0x0}], 0x2, &(0x7f0000f94000)={0x77359400, 0x0}, &(0x7f0000728000-0x8)={0x6}, 0x8) syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) readlink(&(0x7f00003ba000-0xa)="2e2f636f6e74726f6c00", &(0x7f0000ccb000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd2) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r5, 0x5473, &(0x7f0000000000)=0x7c) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r1, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f000009b000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0x10001, 0x0, 0x0}, 0x14) r1 = dup(r0) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000cc2000)="3066b3fcc5e226a2347cd888138ecf90ce851307337ed23999ae959ddc87491b727977f14d9a3549b705a90bc30ea453331c967b6fed8a665b9e001350ef0a73866e8fc472d98a995f43491770e4749c24d7924ba992a69038740dc6452a7047fff23124f2445f10e2ce3e5bbcc3d370e3dc72369b82825684137f1cb5cb6231e244bd37cb3d0cb5fc39c9229e055052f05fa75cdab65547f0f8bcb774c0c697bc0cc850f7d51cd509facd1b6cc93d11e2a33810a73a8f503899e88b8c5d8aa5383fb3dee7cc7b848510767d580a11a8ea397801565e0d68616418c7fd7c92a75f5e155e4c2142453265e1a61e0e4780d81b7e4105aa86be1e5b0e2acca557c7635a4714a3939877aab807581383316a2c2fea8ed875d9b7427853479d6b79b1a91fba867ac208bada680a04362278906f70f7690a177531b2cec9ea138a53d275da1c0a62c7dae0ee7b683f171587a9959174450ee814c030f0228b01989339f4da1293d5aa092c4feea750fd1ca8fcc0c6528155235418da421736e9b67ad4d0f76b7e6b2cd1634868f232b288b6fe0e179900545fb883c8719423359588c3a6c90526cc7005fb53063c1ce54a019f5533843b822e700505391e7c0ac7dd7aef8515af616bcee9fbb80475c3690e7d57985f41353c911e523c5495c8f7335dff9b26d0ff5101b60580d7bb7b26a2db4c9f02ece4fe3d473810565cb52f43032da52d85b0c6c994ffc8f91e2d07d934a8ca93cd44775754dd72e6c0920edaa6e93ea140cacf89f73db83c6c0dd2eb1d14209333a17d174748c20bbb467f5f4e46fbe6511db92ecd41bb777a0155fd6e32b4ba90897a4e379dcd99155e3128b70f498d3a27348a493d08783519d02862bf07e24512a8e3a2dbe58c83d847381b7538b79f1b8b6d0c1e834eda448e0aaef16673da6cf5932d02497b4221bdfc3c6c9ddc0bd9dff917c612880408a931ac9a3814afb873003d6f61cd8247559201918757767fe13e52d34395da40de38c05761bbb131e3c153fc7bd5ba40269af0c214cf2b7f41f18d571b5ff39b184a24bca7f700875599f2afc1374b7c42bd5fe714f0fac101d44742062bc226f34025a766b5d5bf3f17012ee754857bb7ad11745ca97a99c0fbdd6454f03fcaa3b6c4e0623ff79ed837ea5b557f39e89f7a4a7c297ee055e4c34aad2a692aca8e003869c53cebfba3774d294fe54420591d61c979c95e2321f2f9efa525ac98909b55e7f9d766af01ebcdc1905015a19282d281798e5d081a62bd0be6e9c3a550d7a88c6ca1c1b791bc1fdae76d626498607f890e70d6a146d581a96a899258a86692cee1e3eaf4ee9f2908e99d8a9d9ce32586adccea59c29f502b17b1ca9ff05152c7e308ad9ad4fa1995eb797e91bbb209b8c2df27dd02470abbefad8843f624a8085b15248b38c4baffeb3f948823dbf0edc2cec3718c50ecf8ecde1c967de113926b4f73283106d9806083368a036e30aabd1516418e2913ba335c18ee8a3505a9d39ddeb72ade4d1ab8eab836fe00b66007323f49a08f3d6a3211fb5f8b7ac6e97e1663df932bfc5b03861f590d922dde974bedb2c4387615226d124bf98ec52b5c460dd57a75cf6bd666b8bb72368594893aa23538f82986fdfc5de88caf96f215ad30da2062ab8017a23042059f1ea372bdbe7be65ffeda51626fb862069234439ef950f07d734e4280e7c4816075db5b1c0a1e7f37dc32811fb75ac5fea22d69f2de933d647b36b89b8911d70bc78a7f83243908e0189ce4c5be0c9b69a36f2b9c4b1c70304a533631cf453f339146e467ef03844f8acc88f0483ebacf76280271873772c9c04dc66f2572287e729aeae2cf546784da1d163ac314c3c4c691666e46fa02e1268e8fed9d3e897af71a78fe1d1fa8b8356979ac85d18122bd5d5708ba94e2923efea27e8d3d1dea62dada78d765b4db6d0287c6ac139a333994936d0a2dc9c5675d69a8e9caf90a0222d4d7e0cdd057d9245c15315b713717e7d381d87a6c23547e0537e5fc62d62bc071f503149d6a10d5ea416cbe433e08e3e05eb962f233894dc09682c9d5c3d00cfda1c11b42ea6d1974ef19775fd7486fb2c1cb0c0a4cf96d8397c049dc97801cbbc6fbf9f6fa7062207b40dae87f97342b413bb6f528ba000a4729566d1af2b1e0013e92f2f1d9b4ddc98a78acd1017329cf5bdda2ae587469128de421df5623f5edca49d7c2f5d8ff900e15c47a4656a3987da34f801ac59694cb7ec7cc7d88718d4c49420d9d153b183093633183522f9c8955e463b721a90d34a8ad71107f2c1b7946e5cf8b2bdcbf150b1f317dce2a4da0096c8d5ccd86be50b082caddf6a9aaae9956dc7f9aba81977300feb3d6c0b38e0bac1e72920e154c2f5c27971f1a13ca7909a98e87900197717628c0aad7d5d596409ac6135c099b7a51701ca02ecd107d9b6949acbbd2e27b579bef2c530a763c901256447f2caa8caee56bd2a954f7040533d3f66ae07f4cf9738995c9eba01b5ca17b870450be467907230af2eabc2116f3030c6379ff8c5dff4e3650da522f1066401b35c48d0cd822ad5d8f34eddb157fe1d993216d53e2c40cbf16d38107ae52f9ad7389a2e6218b05c5d9c8d18583681cff8a55a166e86a3ca925bdaabd798c61d4470a5e70c7f47868ba1e9f0ea56f2f3f11f14bee77239a12f0b353eb10a51d519a02313d8992cc68b1f9a2088e46aa72084ad31474485c4365efa5b07b7c6b0f8757c020eef7192cd5ddd237c3e288eb3e93e6cd511a85ef28d4a7ad0b48a830051d3fb45bd8029a22af3a8971ae9c4ed9091c36ad8a04b00d39fada4302c7b354a59ddb865abdc40333d847946936b259b0881bc3c6cd3f5382cf642859b2d82e4fdde1222534fb8bcc003e866c7765c9710f018482ea0368ab4cae549f41c3a2e542d4502d0c4cd712f595197e7fb50a4e3cede321925f1f5b41f8280eec6470546a4aea62e1c88511cd77021eb51929b4648a65b9bf3006157ec7ad3e692646b4ab0e81db1c1caa634f9daf52413e9dd1820a41c968a23715fc42bcfde399529fd56dcecd478f00bbfc2aae057d1ce1a818f6b8d0e86f002e9df288a80b4107d3c89ae0f2d0cdd1b139e7be1891a727b8eb2352714a48c85e32b79a7a0331f9733c933f619ab10ba11b8c7c967384ef1b285ee6d9a72de8c3b8a617cd7b230c2ab99e008b81ae5abbd351b7c39c8135eb189dda39307d77923e856606fb44c7a5dfe5425be5e7521efbd80db6e042dac5c05309e2cf0bd0606340d84d80d46f64eb6072a12219d17928e7189e4bfd9684619a6f3f5a5f574e4e85a76fc2ffe1b5daead24ef43cb41660462cfb055744efa064bd74f8aab3262d2a197ea5b969e8fadd9189c3b11bc23695bbb14acca04541090ed0116df6fd935f04ef6e76022add5b2cee26f7d724f011c19dd777babff2b832db8d5d6381c2aa7da7b3f0a6838e3981bd95c238d2b4215aa4a79696a83ab1051c9bf68a7c6eb2731fecd8b18528b318cad90467686dd726c9ba15234462b3b7da748b645e8d2b329ae80d872158b2f0b24158278bcb47edc240846de03e2ee75dcfe69eff6c4ecd22d224d9f50c0694f366055a4ac90267eef23ad8ad733100c84b0dbbf9cc0720b6e7e660197a1c2c0c7df2ba0aead4ee759b59dd8b9a99eb77513052cb536beae051a0a23360e8f42c035d933096e3efde211bb06ad09eb09f8e47be847a889fdfd433a622d0c38af2708477b465b39790e36e2b79ea7f607c8c2b5d67718b35fc74edb2e31991361a1ce97fec92acde84a479c53e17c17dbf4e4653181d1920ae0147cb2509dd1a13a3126f31f8c5c832c1dda50a0ef4f241ee9bd7b799625fc3cbed4b42b7bc8c2238455ada191e05b45d8aaa34906a7c806c101a64ab29d50a630cb4f8b23081fe6a744661893c31afb6c9b59f171182d8214186c47d53eff9034757367b1e20b82aa098d7e62a675fc9fadcc5195e78df3c2f648d01637d6b20ebae1441b3929a7956afd786499e943bd701897860f5d33966b573b101a26a98a884962a9b246c25abec261c0a2f8662868cbad03a2225aa7befd2b5fceaeb22e9c18f4f13f99687e066ba5d883e8022aef96775daa659fd40e5daf53d00176552d317d95c2183965da4854f892980f90a72147d89d1917a7437ce713a1ba083862ea029ea1072fb035db35f4914260546376c89c65113be57399c5c12436eec2bc5a0e7a07db5f3095e0d4c5413aa8f6b338c4cc68c9d8f2f43ed391d0d732b60b48890bd59a27843350b766cc7ac821dcba6b0e50c0e5ccef6090c06e4e5a05c4d44d899cf189b59143be6d7f8978f9af092e7813bbbaeb51d068a5a4a54377b800478312851e4a397d165282d3780432f10c8f98d0626deb53d02b8e386a1c2f85a3c6812372c60f181ba9fc3e2ee0688c3c412f8f452c4ab5874ea2d02aa3b7c98c1652d882a05c5b9d41cebdc25fb9635c150db44a443da32c27d3e266682c87484a2e7234cb84bcfaee4b39b7142de6db0c4d472b3e929f8f1396a7a209c3dd2fc72b6d5ee0da4ceb161183dbc33f1fe3eda899eb9ba87d73bfe28e859ac68082f13b9c297350b9e50f3a327dc17a4af1f481d0ae15071cf9881518898424e4c1e83e0a9860f1cd69918a1b2ecf09fcc490e7ca7e9cb5c5224961ac9f44d42d483cbf9af21cbffefcfd438a5c245665c39cbdbbeb37211ad9d469bc484dbdda74e73a37401088f36248f0fa8dee2b0116ef4b19562ff0742fb3a339043353ce2414af8f87b6d3f3f79346899505761106cbe413479b2256fd5aa98c72a463c03e1e5ca2395ea9b9283db49f6fc860095f639446ab78f92c61c51880bc7d30fd8e853eb559b541a617b60127afd680b40d47a76208a012cfdd0514e4c44f5d80909d531fa1e9f0f460321c0cc01ac570e0c1e976050dedf59cb9b4c3b267ec341123871107f2074e4607a7f4a975314dee2d56db7027c0f01dc500a0879b02e7d0c41cbb36885d6c159c1024a920a56ccd6ef145a1dbedd8e10b5b825391a90c9b65a8077ab467ebb9b39bc200f2bbacc9bd5dfb7075a675b01134325d088e64efdb780cec712805d01b1f02b30b767296ddb1033a344f5c95432033a08936b41cec79729d9970a7eafc2e7b5ae0fdcedc84d5954c671774b455d1909f69e9c3aaa3bd6dc8e8dee0b47cd4127621ad823841ca078d9b2f125ecce3081727d8b79c61f8b290d4f60f7ef4a88094ef7e4d8d2765a113351911c195ee6b33cf6c347a9e7b2a2817b83e79c94343d52ccb89d1b01ca83bec9f8833030236b077d4518733aa6c2651597b376b6777136bdb38491ee7d15545a5237629fa0e6cd5fc79881c9f9b96f4d4cbee58fec7c4a581ddf42e1b37e9c927ec8fbc33c23e7d0dd523e8cc40368c18d8eef29f274592a19cfa340f83a31331eb9bac42116cc7833e9e0549777ec13f9b74fa43a203c753805961ac1621f39e218df5239896d7f0485ac4e849743c01a8ee1f6e5f02ba85fb54f4a6f80f436e92f14ca8bdb03f1e460b9c1fd7a1fc56146207e03dc4f5dfad50585f98a4f9f3a8c51e292c6023fc227962891a18069e916b5fb760e64228efa6d78b5ed2815925b3222dacc3e8bd92522ca6ed57f73900a5082f8370b9e072f06eb1b2b55a7ea5891345b5e838ed09a82e5255f6e5a5b7b5f7a271ff108123b52b8a55e51f7dcb405fec13e4546969cd87c43196a6ebbce9774199d4ed99f9b13f8ea84bb9c4a1c0f33db3072236126b573dbd11e", 0x1000) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) r0 = creat(&(0x7f0000228000)="2e2f66696c653000", 0xd5) ioctl$KVM_S390_INTERRUPT(r0, 0x4010ae94, &(0x7f0000cb2000-0x10)={0x5, 0x0, 0x7}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f0000554000-0x8)="2e2f66696c653000", 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:44 executing program 3: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000d82000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000605000)=0x14) connect$packet(r0, &(0x7f0000c19000)={0x11, 0x17, r2, 0x1, 0x3, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) r4 = fcntl$getown(r1, 0x9) lstat(&(0x7f0000561000-0x8)="2e2f66696c653000", &(0x7f0000807000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000015000)={0x2, 0x84fd, r4, 0xda, r5, 0x2, 0x0, 0x8}) unlink(&(0x7f0000687000)="2e2f66696c653000") getsockopt$netlink(r3, 0x10e, 0xb, &(0x7f00002fb000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000d8f000)=0xa5) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000679000)={@generic="b000dd04639abac2b0bc6aa613f0ce67", @ifru_flags=0x100}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[], 0x0, 0x80000) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000b30000-0x1a)="0000000000000000000000000000000000000000000000000000", 0x1a, 0x40010001, &(0x7f00006c2000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = gettid() socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f000078c000-0x8)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f000023c000-0x8)={0x0, r0}) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000e08000-0x11)="2f6465762f7161745f6164665f63746c00", 0x8100, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000d71000-0xc)={&(0x7f0000419000-0x8)="2e2f66696c653000", r0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000937000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000be8000)=0xc) r2 = getegid() syz_fuseblk_mount(&(0x7f0000722000)="2e2f66696c653000", &(0x7f0000be1000)="2e2f66696c653000", 0x6000, r1, r2, 0x7, 0x8001, 0x41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000d06000)=0x1, 0x4) mmap(&(0x7f0000f53000/0x1000)=nil, 0x1000, 0xc0988f68c0251b6f, 0x10, r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r3, &(0x7f0000746000)=@hci={0x1f, 0x1, 0x2}, 0x6) lgetxattr(&(0x7f0000c4d000-0x8)="2e2f66696c653000", &(0x7f00009e5000)=@random={"73656375726974792e00", "6c6f73656c696e75785c00"}, &(0x7f0000783000-0x5b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5b) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000561000-0x11)="2f6465762f7667615f6172626974657200", 0x400000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000c9000)={0x8000}, 0x1) 2017/12/02 09:13:44 executing program 7: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) r0 = creat(&(0x7f0000228000)="2e2f66696c653000", 0xd5) ioctl$KVM_S390_INTERRUPT(r0, 0x4010ae94, &(0x7f0000cb2000-0x10)={0x5, 0x0, 0x7}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f0000554000-0x8)="2e2f66696c653000", 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000916000-0x4)={0xa3a0, 0x49, 0x2}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000efb000-0x30)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x8, [@remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}, @loopback=0x7f000001, @rand_addr=0x8, @empty=0x0]}, 0x30) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000338000-0x14)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002ac000-0x18)={0xaa, 0xfffffffffffffffc, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:44 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ppoll(&(0x7f0000cd5000-0x8)=[{r0, 0x4144, 0x0}], 0x1, &(0x7f00008b0000)={0x0, 0x989680}, &(0x7f000077a000-0x8)={0x1883}, 0x8) 2017/12/02 09:13:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000823000-0xc)="2f6465762f6175746f667300", 0x12080, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f000085b000)=@sack_info={0x0, 0x4, 0x8}, &(0x7f000035f000)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000fdd000-0x8)={r1, 0x0}, &(0x7f0000915000-0x4)=0x8) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() lstat(&(0x7f00006b9000)="2e2f66696c653000", &(0x7f0000e33000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f000098a000-0x4)=0x0, &(0x7f00000a2000)=0x0, &(0x7f000096b000)=0x0) chown(&(0x7f0000927000-0x8)="2e2f66696c653000", r2, r3) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) socketpair(0x8, 0x3, 0x2, &(0x7f0000c01000-0x8)={0x0, 0x0}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00006ac000)=0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x5, 0x2}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:44 executing program 3: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000d08000-0x10)=@generic="126c4cf9fa55240ea0f77361c6223b3e") r2 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r3 = dup3(r2, r0, 0x80000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000f52000-0x4)=0xfffffffffffffffb) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r3 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000158000-0x20)={@common="69705f76746930000000000000000000", @ifru_addrs={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r4 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) fcntl$setflags(r2, 0x2, 0x1) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:44 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000a18000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x0) 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="00", 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @multicast2=0x0}, &(0x7f0000e15000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00008a9000-0x66)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000673000)={@common="6970365f767469300000000000000000", @ifru_addrs={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000d28000)={{0x8, 0x1}, {0x9, 0x6b6}, 0x1, 0x1, 0x2, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f000043f000-0x8)={0x0, 0x0}, &(0x7f00002a9000-0x4)=0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f000092e000-0x14)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000a00000-0x2)=0xc9, &(0x7f0000874000)=0x2) r2 = socket(0x0, 0x800000000000000, 0x40003f89) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00006ae000-0x8)={0x0, 0x3}, &(0x7f0000758000-0x4)=0x8) fcntl$setstatus(r2, 0x4, 0x4001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000a68000-0xa0)={r3, @in6={{0xa, 0x0, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x20}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x80000001, 0x1, 0x5bc7, 0x941}, &(0x7f000098e000-0x4)=0xa0) connect(r1, &(0x7f0000d17000-0x10)=@ethernet={0xffffffffffffffff, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r4 = getpgrp(0xffffffffffffffff) ptrace$getregs(0xe, r4, 0x100, &(0x7f000007c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000f3c000)=0x4) 2017/12/02 09:13:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000a71000-0x8)={0x0, 0x0}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "15"}, 0x0) r3 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00005e5000-0x8)={0x4, &(0x7f00009d8000-0x20)=[{0x7, 0x4, 0x5, 0x100}, {0x40, 0x400, 0x9, 0x8000}, {0x9, 0x81, 0x8000, 0xff}, {0x4, 0xffffffffffffff7f, 0x9, 0x63}]}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", 0xffffffffffffffff, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000aa3000)=0x0) getresuid(&(0x7f0000164000-0x4)=0x0, &(0x7f00000a2000)=0x0, &(0x7f00008e3000)=0x0) lstat(&(0x7f00007a3000)="2e2f636f6e74726f6c00", &(0x7f000086f000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000671000)={r4, r5, r6}, 0xc) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r3 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000158000-0x20)={@common="69705f76746930000000000000000000", @ifru_addrs={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r4 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) fcntl$setflags(r2, 0x2, 0x1) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:44 executing program 5: socketpair$inet6(0xa, 0x80000, 0x0, &(0x7f00008b0000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x7, 0x800) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000d52000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000847000)={0x2, r1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000022b000-0x11)="2f6465762f7667615f6172626974657200", 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000462000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00009e4000)={r3, 0x0}) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() 2017/12/02 09:13:44 executing program 4: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) r7 = add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000b42000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00000ce000-0x4)=0xbc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PIO_CMAP(r4, 0x4b70, &(0x7f0000350000)={0x89, 0x5, 0x3b, 0xffffffffffffff7f, 0x401, 0x6}) 2017/12/02 09:13:44 executing program 7 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:44 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ppoll(&(0x7f0000cd5000-0x8)=[{r0, 0x4144, 0x0}], 0x1, &(0x7f00008b0000)={0x0, 0x989680}, &(0x7f000077a000-0x8)={0x1883}, 0x8) 2017/12/02 09:13:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f000053f000)={0x1, 0x20100800, 0xa2af709cbed612fa, 0x4, 0x7, 0x9a, 0xffffffffffffffff, 0x7fffffff, 0x400, 0x4}) mlockall(0x4) r0 = creat(&(0x7f0000aea000)="2e2f66696c653000", 0x22) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000648000-0x4)=0x173, 0x4) [ 558.208809] sg_write: 20 callbacks suppressed [ 558.208819] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.208819] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000d5000-0x14)={0x0, 0x0, 0x4, 0x3ff, 0x4}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:44 executing program 4: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) r7 = add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000b42000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00000ce000-0x4)=0xbc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PIO_CMAP(r4, 0x4b70, &(0x7f0000350000)={0x89, 0x5, 0x3b, 0xffffffffffffff7f, 0x401, 0x6}) 2017/12/02 09:13:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00001e0000)={0x0, 0x0, 0x0}, &(0x7f0000e10000-0x4)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000229000)={0x0, 0x0, 0x0}, 0xc) r2 = syz_open_dev$sndtimer(&(0x7f0000b43000-0xf)="2f6465762f736e642f74696d657200", 0x0, 0x0) r3 = epoll_create1(0x80000) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f0000494000-0x8)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f000054a000-0xc)={r3, r4, 0x7}) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup(r5) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000355000)="") mlockall(0x4) 2017/12/02 09:13:44 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) syz_open_dev$random(&(0x7f0000c58000+0x9d)="2f6465762f72616e646f6d00", 0x0, 0x121000) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000097000-0x1)=0x4) mlockall(0x8) connect$llc(r1, &(0x7f0000c51000-0x10)={0x1a, 0x0, 0xfffffffeffffffff, 0x3258, 0x3f, 0x6, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) 2017/12/02 09:13:45 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000290000-0xd)="2f6465762f7573626d6f6e2300", 0x4d29, 0x800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00007f1000-0x4)=0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TIOCSTI(r2, 0x5412, 0xff) ioctl$TIOCSCTTY(r1, 0x540e, 0x100000001) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00005b5000-0x8)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fcntl$getown(r1, 0x9) sched_setaffinity(r4, 0x8, &(0x7f00008c7000)=0x80000009) chroot(&(0x7f000044c000-0x8)="2e2f66696c653000") mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$sock_SIOCSIFBR(r1, 0x8940, &(0x7f0000fc6000-0x18)=@generic={0xfff, 0x4, 0x8}) ioctl$TIOCNXCL(r5, 0x540d) setsockopt$inet_dccp_int(r5, 0x21, 0x15, &(0x7f0000921000-0x4)=0x8ea, 0x4) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000d08000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x12, @llc={0x0, 0x0, "03", "6214f40085ffff0001000000091853"}}}}}}, 0x30) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 558.300087] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.300087] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:45 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000eb5000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) poll(&(0x7f000086c000)=[{r0, 0x8, 0x0}, {r0, 0x8402, 0x0}, {r0, 0x8000, 0x0}, {r0, 0x0, 0x0}], 0x4, 0x7f) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000c36000-0x14)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000412000-0x9)="2f6465762f76637300", 0x581, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000fcf000-0x4)=0x0, &(0x7f00007c4000)=0x4) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002000-0x8)={0x0, 0x0}, 0x80800) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000dad000-0x4)=0x4f, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000002000)={0x0, @in={{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0x3, 0x6, 0xaa2, 0x80000001, 0x80000000, 0x3, 0x2, 0x3f, 0x42a, 0xffffffffffffff08, 0xffffffff, 0xfffffffffffffe01, 0x6, 0x401]}, &(0x7f0000002000)=0x108) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001000-0xa0)={r2, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffff9, 0x20, 0x5, 0x3, 0x80}, 0xa0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) socketpair$ax25(0x3, 0x5, 0xca, &(0x7f0000ded000)={0x0, 0x0}) bind(r0, &(0x7f0000731000)=@in={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) gettid() keyctl$set_reqkey_keyring(0xe, 0x3) 2017/12/02 09:13:45 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ppoll(&(0x7f0000cd5000-0x8)=[{r0, 0x4144, 0x0}], 0x1, &(0x7f00008b0000)={0x0, 0x989680}, &(0x7f000077a000-0x8)={0x1883}, 0x8) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00006a1000)="2f6465762f7161745f6164665f63746c00", 0x101580, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000fea000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000b7a000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:45 executing program 4: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) r7 = add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000b42000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00000ce000-0x4)=0xbc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PIO_CMAP(r4, 0x4b70, &(0x7f0000350000)={0x89, 0x5, 0x3b, 0xffffffffffffff7f, 0x401, 0x6}) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = syz_open_dev$sg(&(0x7f000068f000-0x9)="2f6465762f73672300", 0x7ff, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000df0000)={r1, &(0x7f00002ae000-0x2e)="7973ac59b06def95db6641b4d2306a7a8a64bf9f058ed42fa0dcf7de451432b290b0f8418b26db8cbe605a58a983", &(0x7f0000d87000-0x1000)="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", 0x2}, 0x20) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f000081e000)={0x0, 0x0}) getsockopt$inet_dccp_int(r2, 0x21, 0x15, &(0x7f0000416000-0x4)=0x0, &(0x7f0000d5e000)=0x4) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x19, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x3, 0xa, 0x8, &(0x7f0000988000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a45323, &(0x7f00007d9000-0xa8)={{0x1c0000000000000, 0xfffffffffffffffc}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1, 0x100000, 0x7ff, 0x6, 0x7, 0x10001, 0x5, 0x0, 0x5, 0x3ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f000011a000)=0xfffffffffffffffc, 0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000adf000-0x4)=0x1f8f9e74, 0x4) mlockall(0xfffffffffffffff9) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000b6e000-0x8)={0x0, 0x6}, &(0x7f000080e000)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000fb3000-0x4)=r2, 0x4) [ 558.382103] sg_write: data in/out 524252/6 bytes for SCSI command 0x0-- guessing data in; [ 558.382103] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) r7 = add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000b42000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00000ce000-0x4)=0xbc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PIO_CMAP(r4, 0x4b70, &(0x7f0000350000)={0x89, 0x5, 0x3b, 0xffffffffffffff7f, 0x401, 0x6}) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000001000-0x4)=0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x80000000000fe, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x200000000000000, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000a1c000)="2f6465762f696e7075742f6d69636500", 0x0, 0x232902) clock_gettime(0x0, &(0x7f0000900000-0x8)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000ec8000-0x8)={0x0, 0x0}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f000077a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000009b000)=0xd6) write$sndseq(r1, &(0x7f00000a3000-0x118)=[{0x2, 0x1f, 0xfff, 0x1, @time={r2, r3+30000000}, {0x10001, 0x5}, {0x6, 0x3}, @quote={{0xfffffffffffffffa, 0x1}, 0x8aa0, &(0x7f00007d4000)={0x9, 0xaf6, 0x2, 0x9, @tick=0x6, {0x1, 0x0}, {0x1, 0x8}, @addr={0x5f5, 0x3f}}}}, {0x0, 0xffff, 0xd0, 0x1, @time={0x0, 0x0}, {0x200, 0x1}, {0x3, 0x400}, @addr={0x100000000, 0x400}}, {0x446, 0x3ff, 0x0, 0x7f, @tick=0x7, {0x0, 0x3}, {0xf3ca, 0x2}, @quote={{0x6, 0x7ff}, 0x3, 0x0}}, {0x2, 0xfffffffffffffffd, 0x7f, 0x7, @tick=0x3ff, {0xffffffffffffff60, 0x6}, {0x91, 0x1}, @raw32={[0x10, 0x8, 0x7]}}, {0x401, 0x3, 0x20, 0x1, @time={r4, r5+10000000}, {0x6, 0x8}, {0x4e, 0x8}, @note={0xaff, 0x2, 0x7c1, 0x0, 0x7}}, {0x6, 0x20, 0x3f, 0x7f, @time={0x0, 0x989680}, {0x2, 0xc17}, {0x5, 0x100000000}, @quote={{0x7d4, 0x557c}, 0x25, &(0x7f000053d000-0x1c)={0xff, 0x4, 0x56, 0x1, @tick=0x7fffffff, {0x9, 0x4}, {0x7, 0x101}, @connect={{0x2, 0x5}, {0x0, 0x8}}}}}, {0x100000001, 0x1f, 0x200, 0x8, @time={0x77359400, 0x0}, {0x0, 0x0}, {0x5, 0x800}, @raw8={"7174374642cfc63ff70427d1"}}, {0x0, 0x4b, 0xff, 0x7, @tick=0x1, {0x6, 0xffffffff}, {0x7, 0x6}, @connect={{0x1, 0x3}, {0x1, 0xfff}}}, {0x200, 0x0, 0x401, 0x0, @tick=0x1, {0x2, 0x7}, {0x2, 0x800}, @raw8={"05b8b3965f08b448e44a2ee6"}}, {0x80000001, 0x712e, 0x1, 0xffff, @time={0x77359400, 0x0}, {0x40, 0x6eca}, {0x17ba000000, 0x6}, @ext={0xb9, &(0x7f0000794000)="b13ab2d0608f5a8ff65a42dbbf9cb641985044887b723fca444e0d53f51deae8bc2b45c279904c6bda77f53be5e437e95e6ec6252c508e4d975aa84b9793d70019e1e647d7908e58e37d15845ac5321d18a71d2abd4508a4add8fb74f598e73afacd5a16475bfedb396ef026d2eb6e0f989f5652ec052f4a2374dbb37fd403956265300b18ddb16d49102b0fded512d0c28897944c835ee61cb0cf76fdad2d6ca10df36e9ff99cfe585eec3b80f5b956daf7db7b685f344702"}}], 0x118) mlockall(0x4) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00008f3000-0x8)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f000097a000)=0x0, &(0x7f0000f85000)=0x4) ioctl$TIOCNXCL(r4, 0x540d) time(&(0x7f0000f4b000)=0x0) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f000045e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 558.442790] sg_write: data in/out 524252/6 bytes for SCSI command 0x0-- guessing data in; [ 558.442790] program syz-executor0 not setting count and/or reply_len properly [ 558.474960] kauditd_printk_skb: 43 callbacks suppressed 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000e60000-0x14)="6e65742f69705f7461626c65735f6e616d657300") connect$nfc_llcp(r1, &(0x7f0000e85000)={0x27, 0x0, 0x0, 0x7, 0x9, 0xffff, "e881f5033ef2f513f69e963c49a2e528c782e7dfb9081e2710343a616eb9dc0eef8556b0e0230e2ffcca4639b5a8bd03138d6aaa32b634be2f03cc5a949263", 0x7f}, 0x58) rt_sigaction(0xd, &(0x7f00003a6000)={0x3f, {0x0}, 0x4, 0x7ff}, 0x0, 0x8, &(0x7f0000652000)={0x0}) fanotify_init(0x0, 0x41000) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000bfb000-0x48)={0x4, 0x0, [{0x38f, 0x0, 0x0}, {0x0, 0x0, 0x9}, {0x40000105, 0x0, 0x1}, {0x1aa, 0x0, 0xdf}]}) r2 = getpgrp(0x0) get_robust_list(r2, &(0x7f000090b000)=&(0x7f0000f84000-0xc)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000185000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00006bf000-0x18)={0x0, 0xe80, 0x0, 0x4, 0xfffffffffffffff8}, &(0x7f0000cde000-0x4)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f000068a000)={r3, 0x23, "f84a16671701c09aa6df6b6f99d5c9aba3edfa6065f4f11e84c2ca941cd17ee74d6e3d"}, &(0x7f0000259000)=0x2b) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000be4000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) sendfile(r1, r1, &(0x7f0000b58000)=0x0, 0x10001) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r4 = inotify_add_watch(r1, &(0x7f0000bbf000-0x8)="2e2f66696c653000", 0x1000000) inotify_rm_watch(r1, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f000034f000-0x1c)=[@in6={0xa, 0x2, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1}], 0x1c) r5 = accept4$inet(r0, &(0x7f0000195000-0x10)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000380000)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000037000)=0x0, &(0x7f0000308000)=0x4) 2017/12/02 09:13:45 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f000043d000)={0x10f000, 0x0, 0x0}) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mknod(&(0x7f0000f26000)="2e2f66696c653000", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00005dc000-0x3)={0x0, 0x0}) mlock(&(0x7f0000775000/0x3000)=nil, 0x3000) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f84000)="2f6465762f6175746f667300", 0x0, 0x0) getdents(r0, &(0x7f0000479000-0x34)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x34) [ 558.474968] audit: type=1326 audit(1512206025.129:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=17183 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:45 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001000-0xa)="617474722f7072657600") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$llc(r0, &(0x7f0000002000)={0x1a, 0xf5, 0x7, 0x6, 0x8, 0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f000076d000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x10000000000000) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) r7 = add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000b42000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00000ce000-0x4)=0xbc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000c17000-0x28)={@generic="056a4c63de1d4d2a67ce32bd4afdc3e2", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00006e0000)={r5, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) ioctl$TIOCNXCL(r4, 0x540d) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f000000c000)={0x5, 0x0, [{0x5, 0x2, 0x0, 0x0, @irqchip={0x7, 0x474}}, {0x2, 0x4, 0x0, 0x0, @msi={0xfffffffffffffffd, 0x2, 0x101}}, {0x7, 0x3, 0x0, 0x0, @irqchip={0x6, 0x978}}, {0x100000001, 0x7, 0x0, 0x0, @msi={0xfffffffffffffc00, 0x80000000, 0x2}}, {0x0, 0x0, 0x0, 0x0, @irqchip={0x8, 0x4c}}]}) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f0000443000-0xa)="2e2f636f6e74726f6c00", 0x4) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000560000)="2f6465762f6375736500", 0x2002, 0x0) getpeername$llc(r0, &(0x7f00001e4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000ee4000+0xa65)=0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) [ 558.491708] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.491721] CPU: 1 PID: 17175 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #114 [ 558.491727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2017/12/02 09:13:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ppoll(&(0x7f0000cd5000-0x8)=[{r0, 0x4144, 0x0}], 0x1, &(0x7f00008b0000)={0x0, 0x989680}, &(0x7f000077a000-0x8)={0x1883}, 0x8) 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x3, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@l2={0x1f, 0x3, {0xfffffffffffffc00, 0x3, 0xffffffffffffffff, 0x3, 0x3, 0x6}, 0x6, 0x35}, 0xe) prctl$setfpexc(0xc, 0x80000) 2017/12/02 09:13:45 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000001000-0x4)=0x2, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) r7 = add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000b42000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00000ce000-0x4)=0xbc) [ 558.491732] Call Trace: [ 558.491747] dump_stack+0x194/0x257 [ 558.491765] ? arch_local_irq_restore+0x53/0x53 [ 558.491785] ? handle_userfault+0x12b7/0x24c0 [ 558.491804] handle_userfault+0x12fa/0x24c0 [ 558.491815] ? handle_userfault+0x150b/0x24c0 [ 558.491845] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.491866] ? debug_check_no_locks_freed+0x3d0/0x3d0 2017/12/02 09:13:45 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) syz_open_dev$evdev(&(0x7f0000392000-0x12)="2f6465762f696e7075742f6576656e742300", 0x1ff, 0x428400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000347000-0x8)="6e65742f73636f00") ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000342000-0xc)={0x8, 0x80000001, 0x3f}) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000887000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000626000)=0x88) r1 = socket(0xb, 0x6, 0x10001) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f000050c000)=0x0, &(0x7f0000a38000)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000343000)="2f6465762f72746300", 0x400000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000733000-0xc)={0x9, 0x0}) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000250000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000765000)=0xc) ptrace$getregset(0x4204, r1, 0x200, &(0x7f00004d9000)={&(0x7f0000620000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}) r2 = dup3(r0, r0, 0x80000) ioctl$TIOCCONS(r2, 0x541d) mknod(&(0x7f0000a12000)="2e2f66696c653000", 0x0, 0xffffff81) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000fdc000-0x4)=0x4000000) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000c14000-0x8)={0x2, 0x6}) accept4$inet6(r2, &(0x7f00002fa000)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f000097d000-0x4)=0x1c, 0x80800) mlockall(0x40003) mlock2(&(0x7f0000d53000/0x3000)=nil, 0x3000, 0x1) [ 558.491879] ? check_noncircular+0x20/0x20 [ 558.491895] ? set_next_entity+0x2ed/0xd70 [ 558.491906] ? print_usage_bug+0x3f0/0x3f0 [ 558.491916] ? print_usage_bug+0x3f0/0x3f0 [ 558.491924] ? switched_to_fair+0xb0/0xb0 [ 558.491931] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.491942] ? trace_hardirqs_on+0xd/0x10 [ 558.491952] ? get_user_pages_fast+0x14e/0x340 [ 558.491973] ? check_noncircular+0x20/0x20 [ 558.491996] ? __lock_acquire+0x6e9/0x47f0 [ 558.492012] ? __lock_acquire+0x6e9/0x47f0 [ 558.492023] ? lock_downgrade+0x980/0x980 [ 558.492039] ? lock_acquire+0x1d5/0x580 [ 558.492064] ? find_held_lock+0x39/0x1d0 2017/12/02 09:13:45 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000059c000)="2f6465762f7161745f6164665f63746c00", 0x400, 0x0) unlinkat(r0, &(0x7f0000be6000-0x8)="2e2f66696c653000", 0x0) r1 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000b8f000-0x4)=0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000a3c000-0x14)={0xffffffffffffe7ce, 0x9, 0x7ff, 0x0, 0xfffffffffffff6e3}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000140000-0x40)={0x0, @time={0x0, 0x0}, 0x4, {0x8001, 0x7f}, 0x7f80000, 0x0, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00008ed000-0x8)={0x0, 0x0}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000d39000)="2f6465762f72666b696c6c00", 0x488400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000058c000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xffff, 0x3, 0x1, 0x4, 0x7, 0x10001, 0x3}, 0x20) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) r7 = add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$link(0x8, r7, r8) 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = gettid() ptrace$cont(0x3f, r0, 0x8000, 0xfffffffffffffffc) 2017/12/02 09:13:45 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e9c000)=0x4) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000608000-0xc)="2f6465762f6175746f667300", 0x2002, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000089000-0x30)={0x30, 0x5, 0x1, 0x80000001, 0x8, 0x768, 0x77, 0x4}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000413000)=0x9, 0x4) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000f4000-0x4)=0x0) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000c18000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) r1 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x2, r1) ioctl$TCSBRKP(r0, 0x5425, 0x758) prctl$intptr(0x4000000022, 0x5c5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r2, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 558.492095] ? lock_downgrade+0x980/0x980 [ 558.492109] ? __handle_mm_fault+0x2698/0x3e20 [ 558.492126] ? finish_task_switch+0x1d3/0x740 [ 558.492143] ? lock_release+0xda0/0xda0 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) r1 = syz_open_dev$mice(&(0x7f0000d6e000)="2f6465762f696e7075742f6d69636500", 0x0, 0x202000) perf_event_open(&(0x7f0000e54000)={0x1, 0x78, 0x1, 0x9, 0x7fffffff, 0x200, 0x0, 0xffffffffffffffff, 0x8000, 0xd, 0x81, 0x5, 0x8, 0x1, 0x0, 0x7, 0x4, 0x3, 0x9, 0xa4, 0xb934, 0x5, 0x5, 0x8, 0x8, 0x3, 0x0}, r0, 0xffff, r1, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00002f8000)="2f6465762f7161745f6164665f63746c00", 0x8000, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = openat(0xffffffffffffffff, &(0x7f000070a000)="2e2f66696c653000", 0xc0041, 0x100) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0}, 0x0, 0x0, r1, 0xfffffffffffffffc) mlockall(0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000892000)=0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000343000)={0x7, 0x10, &(0x7f00006cb000)="2651dac47f4dd70b7570787b90b1b7f9"}) r3 = dup2(r2, r2) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00003b7000-0x2)={0x0, 0x0}, 0x2) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000edb000)="62d419ca70a91be70fcf715aff07b16b97eaba6e139d1a632eda1307f7bb5c3ee51163") 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000659000)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00006b8000)={0x0, 0x0, 0x0}, &(0x7f0000533000-0x4)=0xc) sched_setaffinity(r4, 0x8, &(0x7f00008c7000)=0x81000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 558.492164] ? do_raw_spin_trylock+0x190/0x190 [ 558.492178] ? userfaultfd_ctx_put+0x740/0x740 [ 558.492206] __handle_mm_fault+0x353a/0x3e20 [ 558.492213] ? check_noncircular+0x20/0x20 [ 558.492229] ? __pmd_alloc+0x4e0/0x4e0 [ 558.492239] ? find_held_lock+0x39/0x1d0 2017/12/02 09:13:45 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) add_key$keyring(&(0x7f00003ca000)="6b657972696e6700", &(0x7f0000302000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r1 = syz_open_dev$vcsn(&(0x7f0000099000)="2f6465762f7663732300", 0x7, 0x90000) ioctl$TCSBRK(r1, 0x5409, 0x7) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000024a000)={0xc1, 0x1f, 0x3, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 558.492266] ? lock_downgrade+0x980/0x980 [ 558.492275] ? __lock_is_held+0xbc/0x140 [ 558.492328] handle_mm_fault+0x334/0x8d0 [ 558.492337] ? down_read+0x96/0x150 [ 558.492347] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.492354] ? vmacache_find+0x5f/0x280 [ 558.492370] ? find_vma+0x30/0x150 [ 558.492385] __do_page_fault+0x5c9/0xc90 [ 558.492407] ? mm_fault_error+0x2c0/0x2c0 [ 558.492433] do_page_fault+0xee/0x720 [ 558.492446] ? __do_page_fault+0xc90/0xc90 [ 558.492458] ? lock_release+0xda0/0xda0 [ 558.492476] ? do_raw_spin_trylock+0x190/0x190 [ 558.492493] ? inode_dio_wait+0x530/0x530 [ 558.492507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.492529] page_fault+0x22/0x30 2017/12/02 09:13:45 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0xfffffffffffffffc) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00008f4000-0x4)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000440000-0x8)={0x19980330, 0x0}, &(0x7f0000be5000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000020000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() setresgid(0x0, r1, r1) r2 = getpid() capset(&(0x7f0000597000-0x8)={0x20071025, r2}, &(0x7f0000875000+0xbfc)={0x7f, 0x0, 0x2000003, 0x0, 0xaf16, 0x200}) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000249000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f44000-0x4)=0xb) mmap(&(0x7f0000000000/0xfb1000)=nil, 0xfb1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000166000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000342000-0x4)=0xc) add_key$keyring(&(0x7f00001be000)="6b657972696e6700", &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fb7000)={0x0, 0x0, 0x0}, &(0x7f0000fc2000)=0xc) fcntl$setown(r4, 0x8, r5) fcntl$getownex(r4, 0x10, &(0x7f00001fb000)={0x0, 0x0}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000434000)="2f6465762f7667615f6172626974657200", 0x40000, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0xfffffffffffffffe) ptrace(0x4206, r6) keyctl$get_persistent(0x16, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000014b000-0x11)="2f6465762f7667615f6172626974657200", 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f000077f000-0x10)={0x0, 0x0, 0x0, 0xd3d}) openat(r7, &(0x7f0000000000)="2e2f66696c653000", 0x101400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00008fe000)="2f6465762f6b766d00", 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000028e000)=[@in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x401, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x3, @loopback={0x0, 0x1}, 0xa248}, @in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x7b6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x600}], 0x78) connect(r0, &(0x7f0000c61000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) sendto$unix(r4, &(0x7f0000a0e000)="b20a45a7eb5bece261cbbc539c22fb27f5f17afb56a6f5222eabec2bc0ab923bf98fb5c0efae8b956297b65428c8ca8088b65ed8ec4bc429925f5a3755131055f91a6c81262f29da2de702cd95522dbdef59c16619022b8413f74f91fa3e692b2aaedccbb704fc0f719524dd5c2fae", 0x6f, 0x20004010, &(0x7f0000be1000)=@abs={0x1, 0x0, 0x1}, 0x8) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) io_setup(0x2, &(0x7f000082e000)=0x0) io_destroy(r4) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) dup2(r0, r5) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2002f3) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f000082d000)=[], 0x0, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) r6 = gettid() getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f00007b5000-0x81)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000279000)=0x81) ptrace$getregset(0x4204, r6, 0x7, &(0x7f000045b000)={&(0x7f0000577000-0x4f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f}) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:45 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000001000)="7573657200", &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000001000-0x1f)="dea4046946baf989f20a145fe2af65e784ae6616b5dd6381a25387d412b229", 0x1f, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000002000-0x5)="7573657200", &(0x7f0000001000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000001000-0x1)="00", 0xfffffffffffffff9) keyctl$search(0xa, r0, &(0x7f0000001000-0x12)="2e726571756573745f6b65795f6175746800", &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1, 0x0}, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setfpexc(0xc, 0x100000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00007b5000-0x98)={0x0, @in6={{0xa, 0x2, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x8}, &(0x7f00007a6000)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f000084e000)={r4, @in6={{0xa, 0x2, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000dc1000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0xffff, 0x0, 0x0, 0x7ff, 0x0, 0x2000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = syz_open_procfs(0x0, &(0x7f000076f000-0x7)="6d6f756e747300") ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00002f0000)={0xff, 0x5, 0x100, 0x9b, 0x3, 0x14, 0x3, 0x4, 0x7, 0x8, 0x0, 0x6a2}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00006a6000)=0x0) gettid() [ 558.492539] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.492543] RSP: 0018:ffff8801c8867790 EFLAGS: 00010246 [ 558.492551] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.492556] RDX: 000000000000010e RSI: ffffc90002cc8000 RDI: ffff8801c8867b90 [ 558.492561] RBP: ffff8801c8867870 R08: 1ffffffff0d30b63 R09: 1ffff1003910ceac [ 558.492565] R10: ffff8801c6e1e200 R11: 0000000000000003 R12: 1ffff1003910cef5 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000d18000-0x8)="2e2f66696c653000", 0x2) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000f1b000-0x1)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000a27000)="2e2f66696c653000", 0x8100, 0x1) mlockall(0x4) r0 = syz_open_dev$vcsa(&(0x7f000015e000-0xb)="2f6465762f766373612300", 0x7fffffff, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000e01000)={0x0, 0x56}, &(0x7f0000b00000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00004e3000)={r1, 0x462}, &(0x7f0000cde000)=0x8) rt_sigprocmask(0x3, &(0x7f0000105000-0x8)={0x6924}, &(0x7f0000d93000)={0x0}, 0x8) 2017/12/02 09:13:45 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000d3e000)=0x0, 0x800) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000e8d000)=0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) sync_file_range(r0, 0x1e, 0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 558.492570] R13: ffff8801c8867848 R14: 0000000000000000 R15: ffff8801c8867b88 [ 558.492592] ? iov_iter_fault_in_readable+0x1a1/0x410 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000976000-0x9)="2f6465762f72746300", 0x200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000dcf000)={0x0, 0x9, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0x0, 0x9, {0x0, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x168d, 0x40, 0x3}}, &(0x7f00002ad000-0x4)=0xb8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000ea3000-0x8)={r1, 0x1}, &(0x7f0000888000)=0x8) mlockall(0x4) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) mremap(&(0x7f0000a00000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000f0b000/0x1000)=nil) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000e6d000-0x11)="2f6465762f7161745f6164665f63746c00", 0x400, 0x0) bind$bt_hci(r0, &(0x7f00001ac000)={0x1f, 0x800, 0x3}, 0x6) 2017/12/02 09:13:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000000013, &(0x7f0000d06000)=0x4c, 0x4) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f000063e000)="ebac44203928585f7b645cd685df865a283072d039f60125d5c787cf593793d8ef18ba1440c6d79782af9776ef5dd0f9279fbff17e1e53758048b4da6473468f79d006842090615920543b0fb8ec2e8107a47163e6704795c5d38e24930f28c84e403dec81d42ccdc69a91da1d77313181404bda608d5e49c01c379b67c3288bc3b8d289e1bf9dbe89ab7ffa38bed0ffcf6d4410b8924d369ca2ae7b0c8f1704d0b9", 0xa2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)="2f6465762f73657175656e63657200", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001000-0x8)={0x1, [0x0]}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f000001a000-0x8)={0x0, 0x0}) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() time(&(0x7f0000d62000)=0x0) [ 558.492616] ? iov_iter_revert+0x9d0/0x9d0 [ 558.492632] ? mark_held_locks+0xb2/0x100 [ 558.492639] ? simple_xattr_get+0xeb/0x160 [ 558.492650] ? current_kernel_time64+0x122/0x2f0 [ 558.492674] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.492694] generic_perform_write+0x200/0x600 2017/12/02 09:13:45 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x400000000, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000044f000-0x11)="2f6465762f7161745f6164665f63746c00", 0x240200, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000024c000-0x20)={r1, 0xffffffffffffffc1, 0xff, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) getsockname$netlink(r4, &(0x7f0000454000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000732000-0x4)=0xc) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000b1000-0xe)="6e65742f6e657466696c74657200") ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000f40000-0x1)=0x3) mlockall(0x4) r2 = creat(&(0x7f0000c9c000-0x8)="2e2f66696c653000", 0xa1) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000f38000-0x4)=0x8000, 0x4) r3 = socket(0x1, 0x7, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00004f1000)={0x0, @in={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x147, 0x3b, 0x3f, 0x4, 0x3}, &(0x7f0000b96000)=0xa0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f000016c000-0xa0)={0x0, @in={{0x2, 0x3, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x8, 0xfffffffffffff6a4, 0xfffffffffffff62f, 0x0}, &(0x7f0000ad3000)=0xa0) rt_sigprocmask(0x1, &(0x7f0000a64000-0x8)={0xfffffffffffffb5b}, &(0x7f000017f000)={0x0}, 0x8) io_setup(0x6b3c, &(0x7f0000406000-0x4)=0x0) r7 = syz_open_dev$sndseq(&(0x7f000017c000-0xd)="2f6465762f736e642f73657100", 0x0, 0x40140) io_submit(r6, 0xa, &(0x7f0000350000)=[&(0x7f00001bf000-0x40)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000f0e000-0xf5)="d636e6b8db2ff1a08383ec92dc3769ac299b00d9d5bc108364d26684d50d6c20323a71adb32d8d76a806cce34a567859a305043c7a64119a19c3ed71cd28c47f2a183590d69ac5c4d5fe1e34b363f3d8797225aaf5286ed190a93a0567a40969e283536ab39043da1e0ca35fee268a65c54dd100cd40d855f6c67ccafc58a0befc716f764dc4174e696d8b0a32152ab626be7c5a77f9ec4c3d9e2f990d8f6d6cc6bbe8eccdfc916d495247fea3c9e14db80abdaa9e7d28452cebc219430ff9f828b2528b8a4f285f895b26425fde297b0e431c2d71dc01f49d35cbd32da42790a10dfecedaf220c52273836d1b611c55b73feb82af", 0xf5, 0x9, 0x0, 0x0, r1}, &(0x7f000056c000-0x40)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000488000-0x79)="9cf58df034a7729595b06f1b381ce99f8413dfe8a18f41f9a772d4feee147c51f9eed7b702b8c30b9ed5070a1ca939d889d63260312f0d3cf0ffe93cd88eece8ff6a7c2d04c7c44b42530d60cec0fae3e0e1926f749d9ea5584f49f76e1bdfb8342bf338c771ada1d02d7081b7ecfa090d7f570715166aecec", 0x79, 0xe9, 0x0, 0x1, r1}, &(0x7f0000486000-0x40)={0x0, 0x0, 0x0, 0x6, 0x401, r2, &(0x7f0000c2d000)="d2ad842b698eb91fe5630f246f8bb5f5c2f1c4239a23a9cb20721f8e41a135b9d437e9f396ff967f8093aacbcc9ef818fbf8b89359473c7bf205964a26394a871e2d8842d285fbc34c1d1f7d4ef9025a21ec3398b3ff07795980ae939a672e974937eaad8ba0e5e529a81e84fc188b7ad89aa9255fc0436f9cfc880cebbc055da2c3ab0a2da970e7641c48ca666aa99f", 0x90, 0x3, 0x0, 0x0, r1}, &(0x7f0000542000)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00009b9000)="", 0x0, 0x2, 0x0, 0x1, r1}, &(0x7f00005ea000-0x40)={0x0, 0x0, 0x0, 0x0, 0x101, r0, &(0x7f00009cb000)="7bdba71c863f2ea07cc2391cba67bcc499db26ff4f59a1a73009988f0caf17e92dbfa71f5dfd3702754c3f389601b10886ecebe784b7dda4ae526c41e4b0e5612e0c7c0f4ab266326711e8b2711239ac7c52a36c575b78519260ec824bd31daf2db85a390bbed3e4e4868febb586ce3a033a1407860291dcd727c0facb27ae0f37638c47f22b0d7477bee7dc5f91d580c30e71c4e33cda65645b8a8c95831bf47c4c2923a82c88d66984187f8665e31f69a36d0711bc9c8d455bb4b102fbb603ba6537bcaadf6600fea3fc2b8c3ee1532c8a7b27d6051e89263cb124d9e6d6aecd07cdd68c4cc2f8", 0xe8, 0x1ff, 0x0, 0x1, r1}, &(0x7f0000f1a000-0x40)={0x0, 0x0, 0x0, 0xb, 0x8, r3, &(0x7f0000208000)="a839bead3bd94c937b1f9f66ff12aaa64fbc2e15092ac614a4e3fb3d6967500792f7cbbf2f1cbcfba38f52bf43ad5376b9e6337a25b2583159add11fd3232edfb9f3e085139225b49e53d0be077a701677616f88c9", 0x55, 0x77, 0x0, 0x1, r1}, &(0x7f0000c1a000-0x40)={0x0, 0x67ac9d979d8b57aa, 0x0, 0x3, 0xff, r0, &(0x7f0000237000-0xd1)="9712e191a87f04f40e05afa77db774c359fb5b200b1516c6bf48ea213ba424406ac3cc54fb786a796a8fdcb88e30ea25d017e0af754e19d581095f3a16cbcb9a98b2a204a5e5bf90e6c7f2a9be1f3d0836b2dc970a028ff433c920585164e76c1dd55477b8d6c95a245f03a3ee31954c8aafd07b525006b0e500dddf23c3c9118199aad245f6106d3202d292e1b28870ebce41dd6ebd7fca98d0fae35828d9c9fb0b5b4d9ae368f9adbabebfc4940bf69bce96b0c475215564b5e6b71ccee437f864a1f0f4dfc735ce88a299d254551a16", 0xd1, 0x2, 0x0, 0x1, r2}, &(0x7f0000dad000)={0x0, 0x0, 0x0, 0x2, 0x61c1, r7, &(0x7f0000fec000-0x1000)="cab0b638f4a4e684e37fc552a4e12c8046b2710603f5090624467ea7f329c5437e1a82f6e00f8809c6faae81dac9b36eb47e9763bb1f0cc24c9112acd7245e50380d505165244043587f8e01967a66839e588bd5e69984a164c13f721b26f70b405cecc885d93b51f03555dadd9bf633fe926615608bbfdba83e61d2770854c0161cbd87be8ac3c7b57ec53611274a3cf8ae2aa897ff3bafac9cf21bc3456b4cd266a7872f1a214f5d2f53961b6cfbdd404c4c4c9165138d1da739819a2c90bcc89a390b0d91e26c1c4d13cc469d1885e20a62ee2d4e73f481151c856931e80a2646c14f2e82207c50ffc193b14c00b0e763771e0516b310fdfc80654e2e2855afdd9d9f0e1622cf7e3b97b279e4f4f33edd43dced92f7b743ebfa35691b439c0910370ce0e581cab9c1516fa2ef9e78862a8f6fb1a97b1be3096d3e9a8895b2ce0c842ebc6b351403020b2d5c62e291f727508e0681f5d756391137819a6f75884d00088d5a5dde9dbfe14b8732ecb6532b7e286da91aa514bc8a5053481461c3db4af5454bb090f389eed72191ded5c97557d35389245c7a58836a1cd1b73104ea58e9c7d40872618934fd1e53399f16f2bef8ec16873e25b2a70b6de4c7203c44f03a7e27b29d3dee228bd2a1dd75bca6795dcfd6a36305c72058c3560a4b88b59c43a0b5be5ec2c2f38b43e8fc81da202a1978084b1c87ac4c5c771a46ae6ba6233bb3100c4fdf93ac44da70848c0a9694b96df34d1b331f2c8c914119c37be177153042ad0dc11eaddc62442c81329229154861f81625fc6a0b778717d3d3e93302946fe834eef5e1e281bcbd4d9d15e942a3bacb9d88879c362d6e1bad42ad5f4432ec06d8571b8cb518ad1bb628f95403fe966082241b66d5744d756bd1d6225f37f5b3e1a0c33d651a06b6c8e05a3e0514510dfc210535c6fb7fe217e31ac7bcf793cd7ddb085a19e58354558a8fc03e824c766c34a1fb4f24155e7afc03bb44d2276777747a8d84a66418c6b2a35950c53d025bdb9fc19a942662f3917a2e37e7939e58e2cbfd32800d9302f9b35e3443dc656afbb5deb7d0ae35cee781a85a349957a94cda4268c972f787fab7f2b5a1c69e2af6181547706a2c4c2743a1a24b505f6a6847ec7329aac7fccddecfa563a4362e23dda4160d4b4f52c7f4e1579769dd4916e7901b587737ff374b0839184880e6306e5b3011a9116d2a3ab4f858c68949d92039161a21625a8b85894dd72aa449c45251f5d05c4a24c65f0534e97f611943758a09c413c6fc956146d308b31197ea0d02d8eeafb984d56488fb714a6510fe2c329228de11d93e33a9cd3eed6b24b7ec3fdbb454f8dca38a974d98e02b142c15ec838111ccb2a67b2b28edeccd7c34ffcae0ccbbc5dba1fc989f9b75cdf5e4ca76e32c72fc2c69e94d82c10cef18b065361a04373f97ed519c26094b4fc7f42fb3fc0a0a4e4bc1a6799470bbd87d5bf3e5b04c909233cbeaf170dc5363dc1919a3e8e94edfe9f3a1a17079eeb3653189a0afc934f650b16a216f5b2103f9f11769e7ff09cd2973f20d5a5fe38564f5634307369f25a2a55a86bb4a25985f7addb235a195361b03bff422eba6e1bc6805accb5734e4de3b029bba8f85386567712eb33afddd7cb7ef744e96e2968616ae810290dbe699e6c963da43f1e7ff8cccf08394acfc5799bfa62cb63ce7ee989b626000448b54879e78dbba45c6c33f43a25889cf0a20d5f88e95e3f8624f2f93ea61d1f77c9e88c8da621ea1cd6d407264e4e78384a535e002adf0a972eefa199071620e8adf4730a545168f89cb210b7f1b9d588cc927ad901f727fb88368ef7fd71268854a4e7dea4bbbd8334cf7e8788c14655745d7253bb7aedeae3f7bdab4380f4b42716321d88803174795302fbc20bd5d37ef030f9f644cc08cfeaecfce3a9634d8b5ab1b4c42f3b78cd13e38cb0c792d272059980f2881e9508e77902523a0cde25d5fa4613f724b114a045478d6751e31b2bc0ba7fe5fc6b45b430b883bff894fa57198470cb7732bad6da7cada7ac7db1de4ee027c23c4d7186de7fc022ca61926914eb7fff23f85c00ed1b17d81639f16d911ec4f065e8e8a15913973b5d3f4d07fdb2c77154512a6c4ba9caf7497f412ffcf9ce3152f38b87b424a5293a1075a0abedc73f756ba711b2dabb95074e8c913f0fde43381b341b861e6336f96353054befb28ff9e94e498547300e8df1b2bc57aa6d8388955674cc2c94448d940f9416fc4d72c7bd49309f2bee0ab0b78ab5ab1a49a95f330f8fb664ac057fcf524419f35a8b09b87812e62ccd844e47f995c25b0bdfecc34e8c524e8189d0c60f30a4b09ec7be5c569a81b780e7280b7d6fe0115da2d26b043d4a404420a6b6fe21dde7a022062c0a572acf28745ccb3c3977ff2a7ef3dd72010b1ae0079a06a80786ba94da2bb2352f6201d9e9762c21de68570a3a6d4fceec6ba9c09b26641db1875cb7bd43ec4f6fc434574709250abc0f429c35aaccc295546bd2c8a5a31dadb63a9e0d4fd2ec5846bc6dffe90f8a019b1ea92b0df45520c7e8dacfddbc86f688bccb729f945f3855aba70037ab60b28e354de2162edc37883b544f8647da3f3a0dcc47a06f695d9b0a6b1c7cc7f75da441db5809f6acead9a6420ee35ebbfdb00f7ba2a1fbe52037a82e819e4c61cd2d1bea828681fef70ad39df41ca2fce1747716b9631182cd13db0fc7df45138184502b7ca2a2541445c53875ab4f21bf7d78a19f275bce17390c4c1a0415b72f2bc43c7c3ad606e7541e789bc1d815fdee4c1e65e7c0e1659dbbd282da1c0c31887932b36f2499be21b43bd6b7ac022c147c4e3eeb71e00433f901228e319fde6c0742a42899a0701847f44fec038c2440700e036855a3ad01f2037f4657816c8dedfcca4ac169bac816df38518b78aefd1b1ddd236a05323befc0f0f9df1a28054dbd216b8845a84becd6f44f84b36e6555b6a243309b17e14322adcec777c739083f2f3b3be71d824033a53cf268a33b7b8150c3a1085fc5853b495d7fffeafd9e52a3cdd6076b4eaadf27e4e141bdbcdfabe46bc4db844e4ae22be5cf5f548bd20a9f4eb9964ee9b82f8d6bded93a7dd1c2f339ebd2f33023dfe93d25f4ccc9c721f0c236eb747bd501bbe96669d122865f3624a2e8fd142192b6d3bb7dd848ea1c0b29365d43a41f35a358e94ca0f22730f11fb5cf2b75b2ab63e2350be23d722f2099ffbf3a447829a7e97c636db60c3958d022e0cb4f40cc411b183d04137aeef1d0ea56aeb7f2099d75ee6f082722b8288c8fe0cbcc91f055648359d0f5f7557b1ce24670dc0c8ae7651780a174cd0b010daae809ec9333d0294a40b2a0f18b517f05d5ef73b41bd840dc753e01c7057ef227843dd9f0402cb4b703f3b1e4a68f4518c1c038905508f5e46678a7b910e2481d1e5d06e5ab16c34593dfe30ac1b213380c53bfa29a7873b00e99525829ab0eb817315954d4ac55633c8d7c4929dce9d6d6ac998232b347e913b4dc4569c3eca757131caa6690084b2386fd0d18d5b823a9f3c0b215af59c0ace24f5fa37f1cbbf3611eb3e704e86c6ac1011da3e3a373da14f0be2846a303e4896adf01468c5806e83680922dcda0ab9f31e288642ed71a44e9b7dc8e2921062b4031e0d6c2c24ff45a8a74d3a9722ff78159e6174d264e12800878b80166af7e4d442640fd0cf68a69ed2f0928f4e5ecb8b771239aae2af051e0e31fe3b57e8132bf04f3a712a2d7e18733523fd239031bfe9140405be24c44b92891a82d55f11edfb1c9e95a5b0db009915ee8100c7bc654da7c6a8db55a49dde9ea9b76b4092599ad04f2ae5feda6e240594feb873791818764d6e5d5a9718d0a019ece0667f90da9fd7df2369c31c4cb903337d411432ef927a9f402a5cdfbc24b8159f8e056a8f1749a83a7e84eb2ddfb7eb92538c449fef238b30aed293e4152e3c1a6e8a2d400dddf86671a48c0a7656c97d0be408ccfc38d67dc82cd484c7b842771ce258128bd0717d42e667c7eb049a7095f155c3d0a1d1015f403902dcdccf623121ec25b05dd1c41c3c52b6c5afd1d58dcf07c74c030ac374b02839508859c62abf8e20041567b797a411e21fe3810b981fc11a0e5de0db15ac9eb24a940aeda5025d4272dd02127aeee451e8d25020e5bf8644adebc3fcb270a3ae0f66668c17148c165e8175287a1fd7dbe1334dc3964fab0eb2c0ac88dd3a1b2ba9125b519890e9700798c5b13af99b1b9beb892c1b85c9f8cef164fc27f3c96ddb17499b08bca54113134b851198b690285912529dbeb285b04bca6e7679ad92b51bb7d527790edf4fdba4fe46431fdeaa6b6104f2331dca0fab4b633009c7b83ef4e805cacf3ba50bc7ae48ae92d23e854b6b7be7edb3e66d0d0a11b94d07c2bd880f68958bec8db59c6108124b7faa5163a37b7242fc2a60e79b7213271fd620f5ed196b3abf1c3011847947dcb94a152b9213ba49e71563f2860c053222dac5b2f4e4bf9c3ecf873b82df21bd54ecede2b60965bba1bfb64441e43a7a766fd1fe3c4805ba01ea547ebb2ca2514393419fb5c558a38c9e4f0864242d982e09da1d8a36d6c140fa4823ead907f5ae514fa636eb83587afe740d56ea76868b25351ec1e93d0980e697649614d7278ddf5b5d1811576e0a4d08bbefa12aaf77553ae0c452e5f75982d4da31c948e49db226b4d42a4e4091842cbe38fe965e13c0f7964bc883820dbca2eeceb5274c5581bb72722919fdbecd1fab08d8a48d4ff6f69aebf981517ccb3016478995a57be779a91a62f5d92adbb040cd0fdaa62f94d88e7e11069f830908584e0c169f32952dea73f9fe7307bc54078e4ca51b61800358a3aef5135b72e6d46fc9f26cfa0dde5f2289d5155f0e70583ce1205bc030c8bc44e72b52e1511d88085d208c303c1ea2d4ca170c824ded5f412fdccb8a941c9b66df84e7c390b4b7bffbc93f7b4eec5c28235698db4f5729ff0086a5a7f9e55994dceee19aecdb771fd1d95bd774f8863ea7a8c34d2ed15a6049857bd69d46c2ea3025e48468cf7de469c0018a598987a35aa290050b4380630f03641047c582056dbb38b0991df27073f73279afac81c2674d4d7bdcad06ebf5a9f0ba3198050e7be5bf3fd2e06a3019715b1e775008ed88b733d72c17fa85be0242373003307e42db04b97ab7543f1353fa84daff3a927045236a92b453bc7e15de58718a15ef3dc939181384024f3ddf7859e7cb6ed48a9ba8f9c880f1e52917f92fb895edc8b714c2a315abd1604f2c9f0512946b38b729277d4138b8fb1c853f6351320cbc3f05d728b25f72d9890c9516a0bfaeae20286cfc27833ac3c42eeb1a4000e040e8bf9467628ada0821beda9194db9b62fa988fa151301d5b5a4c50caa97334ce4361aaada2ac8c86039ac80e173cfb8742d3b283d37033a21202ef0b657614be7a1be38a4e2f2e5a6a05b2b660edfc6d89c6353625a674dde6f98358afcd6d6bff70ce331240441bc21d36d0168fb01666e9f00c478ed00b5ac8e8b15958155bd28010b6ab0749c3cda2a0f55ee4d75bcc826d89e638ef53d67266ba7c704b0316f352df0c818308e3cb6b6013e3fc3e083b880638be8cdaf4cb2e6f5081b66855dc17742adfc77a7bcf92e0a861b050bd913f9e535678e13bf55c34dea0127d3e57ac30859a86c411bcb7d4903ba506bbb30c947cb9eebf7ea46d1519f9625ca33383dee2fbf304b53128f9f8a0236a16fe1fa3d8bbc7bb287c7e0b595120838e4c", 0x1000, 0x20, 0x0, 0x0, r1}, &(0x7f0000cfe000)={0x0, 0x0, 0x0, 0x3, 0x7e, r1, &(0x7f0000426000-0x52)="7d3df7c19e371412f732e2772e2ee110adab9cb981d85c6a6021129cc645b741d1f750360b1513c3befd046ca08da03df3d316d879e03c4a6d58dbc57239cc5c53413be0fc70fd62851bf92c6b58c732b3e7", 0x52, 0x7fff, 0x0, 0x1, r2}, &(0x7f0000677000-0x40)={0x0, 0x0, 0x0, 0x2, 0xffff, r3, &(0x7f0000980000)="7a5ae7a2efa54c50e9a6bf596e3f1f89b3448b2564857dbd06c3e3d9dff22cc24aba55a8958b34357a3634183383c261c13fe5d95605daf014285ea62ae3cff5cc20187f092b9ef7fe55e088cdecf74c2d4c5ed3e11d1baf61e18ee668db7fd8a1344ea91c16e8c881909fc589d8acb5c9bb1976d55500bc49cebff6098603bd7896570ddb77c8f7e4c51bd961c2047725bec6724ef55d576cbe3dd80187f7a87a5abcbc8050ecbba14287381c7b71eb0cb2512ff82092070c7b6a85054f77bd7161a991f3a32769", 0xc8, 0x7f, 0x0, 0x1, r1}]) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000cdb000-0xb8)={r4, 0x7, 0x25f, 0x1, 0xffb, 0xfffffffffffffffb, 0x10000, 0x40, {r5, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x1ff, 0xffffffffffffffe1, 0x0, 0x0}}, &(0x7f0000d3b000)=0xb8) [ 558.492731] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.492741] ? generic_update_time+0x1b2/0x270 [ 558.492755] ? __mnt_drop_write_file+0xd/0x70 [ 558.492766] ? file_update_time+0xbf/0x470 [ 558.492780] ? current_time+0xc0/0xc0 [ 558.492797] ? down_write+0x87/0x120 [ 558.492814] __generic_file_write_iter+0x366/0x5b0 2017/12/02 09:13:45 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x3, 0x0, &(0x7f0000fdf000-0x8)={0x0, 0x0}) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f000010b000)=0x1ff, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) io_setup(0x7, &(0x7f0000677000+0xc07)=0x0) io_destroy(r2) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00006d1000)=0x7fffffff) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:45 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00002e0000-0x9)="2f6465762f76637300", 0x2a000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, &(0x7f00000ca000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000000000+0x9fe)=0xb8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xc6dc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000a71000)={0x0, 0x102, 0x9f04, 0x0, 0x0}, 0x14) connect(r1, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000a8000-0xc)="2f6465762f72666b696c6c00", 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00009a5000-0x4)=0x4) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000637000-0x40)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_GET_REG_LIST(0xffffffffffffff9c, 0xc008aeb0, &(0x7f00009bf000)={0x5, [0x9, 0x3, 0xf000000000000000, 0x2, 0x4]}) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000a2c000)={0x0, 0x0}) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f000077f000-0xe8)="a49c2ba92f586114d4c1e8b8ae4a6d340243ffd4b441bf303f5f4cd4e832281db365a8bb35ac75994b30f244fb6cfd9beff6a77f1b49761541cdc168e13ad04550270c5be4331e57fb04dea45afdf6cd664ed697f023c80fc0572c264e5decae8f09423f37266cbe76f58ac68a570c45fc6031b243c72f59e64e56a03be611b890da0a64fcc43a1051f45046cd591c360dfdbe7d3505f6885608baba7603278650655e61421886164b52168378a9cc6ac6fb93a7bbaac8eaccca8c8aaa74070f94f6c7b283eb9f5bb60c63984d56714cc577beb2ee6be44b3104cbfa3dd3d7b9f85f795687b38883", 0xe8) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$void(r2, 0x0) mlockall(0x4) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000cbc000-0x10)={0xce1, 0x100000, 0x1000, 0xffffffffffffff53, 0x8001, 0x2, 0x8001, 0x2, 0x3, 0x2b3a}) r0 = socket$inet(0x2, 0x4, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f000040d000)="2f6465762f73657175656e63657200", 0x32001, 0x0) dup2(r0, r1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) fcntl$getownex(r0, 0x10, &(0x7f00007cd000-0x8)={0x0, 0x0}) tkill(r2, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 558.492822] ? check_noncircular+0x20/0x20 [ 558.492839] generic_file_write_iter+0x399/0x7a0 [ 558.492857] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.492873] ? iov_iter_init+0xaf/0x1d0 [ 558.492890] __vfs_write+0x68a/0x970 [ 558.492905] ? kernel_read+0x120/0x120 [ 558.492949] ? rcu_sync_lockdep_assert+0x6d/0xb0 2017/12/02 09:13:45 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) unlink(&(0x7f0000687000)="2e2f66696c653000") 2017/12/02 09:13:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) stat(&(0x7f0000ff6000)="2e2f66696c653000", &(0x7f00002c5000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r0) gettid() socketpair$inet6(0xa, 0x806, 0x6, &(0x7f0000645000-0x8)={0x0, 0x0}) getpeername$inet6(r1, &(0x7f0000b16000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f000044d000-0x4)=0x1c) 2017/12/02 09:13:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r2 = userfaultfd(0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r5 = getpgid(0x0) r6 = gettid() kcmp(r5, r6, 0x1, r3, r1) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) unlinkat(r4, &(0x7f0000693000)="2e2f636f6e74726f6c00", 0x200) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000cde000-0x9)="2f6465762f73672300", 0x7, 0x220040) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000e6d000)=[@in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, @in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x5c) mlockall(0x4) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1000d, 0x1000007, 0x2, &(0x7f0000b93000)={0x0, 0x0}) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000d62000-0x58)={0x5, 0x100, [{0x5d, 0x0, 0x0}, {0xfffffffeffffffff, 0x0, 0x9}, {0x9, 0x0, 0x7}, {0x5, 0x0, 0x200}, {0x2, 0x0, 0x1ff}]}) mlockall(0x4) accept4$inet(r1, 0x0, &(0x7f00009f3000-0x4)=0x0, 0x0) [ 558.492958] ? __sb_start_write+0x203/0x290 [ 558.492973] vfs_write+0x18f/0x510 [ 558.492993] SyS_write+0xef/0x220 [ 558.493000] ? security_file_ioctl+0x89/0xb0 [ 558.493012] ? SyS_read+0x220/0x220 [ 558.493024] ? do_fast_syscall_32+0x156/0xf9d [ 558.493038] ? SyS_read+0x220/0x220 [ 558.493049] do_fast_syscall_32+0x3ee/0xf9d [ 558.493069] ? do_int80_syscall_32+0x9d0/0x9d0 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000324000-0xa)="2f6465762f6375736500", 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00009dc000-0xa0)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x4, 0x100000001, 0x2000, 0x4e}, &(0x7f0000c8e000)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000dcb000)={r1, 0xfa}, 0x6) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:45 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) r2 = getpgrp(0x0) ptrace$setopts(0x4206, r2, 0x6, 0x100002) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00003d5000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f00008d8000)=0x400, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00001f6000-0x4)=0x1, 0x4) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:45 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000-0xd)="2f6465762f62696e6465722300", 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00001c3000-0x8)={0x46802729, 0x2, 0x1, 0x1}, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) [ 558.493087] ? lockdep_sys_exit+0x47/0xf0 [ 558.493096] ? syscall_return_slowpath+0x2ad/0x550 [ 558.493111] ? sysret32_from_system_call+0x5/0x3b [ 558.493129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.493149] entry_SYSENTER_compat+0x51/0x60 [ 558.493155] RIP: 0023:0xf7f88c79 [ 558.493159] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 2017/12/02 09:13:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) getpgid(0x0) gettid() request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000056d000)="2f6465762f7573626d6f6e2300", 0x0, 0x42) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000d11000-0x1)=0xe4, &(0x7f00009c7000)=0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) [ 558.493167] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000020011fd2 [ 558.493172] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.493176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.493180] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 2017/12/02 09:13:46 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000f8b000)={&(0x7f00007f2000/0x1000)=nil, 0x1000}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 558.493184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.506220] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.506220] program syz-executor0 not setting count and/or reply_len properly [ 558.529728] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.529743] CPU: 0 PID: 17193 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #114 [ 558.529750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.529754] Call Trace: [ 558.529770] dump_stack+0x194/0x257 [ 558.529792] ? arch_local_irq_restore+0x53/0x53 [ 558.529815] ? handle_userfault+0x12b7/0x24c0 [ 558.529835] handle_userfault+0x12fa/0x24c0 [ 558.529845] ? handle_userfault+0x150b/0x24c0 [ 558.529880] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.529900] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.529914] ? check_noncircular+0x20/0x20 [ 558.529933] ? set_next_entity+0x2ed/0xd70 [ 558.529946] ? print_usage_bug+0x3f0/0x3f0 [ 558.529957] ? print_usage_bug+0x3f0/0x3f0 [ 558.529967] ? switched_to_fair+0xb0/0xb0 [ 558.529975] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.529988] ? trace_hardirqs_on+0xd/0x10 [ 558.530007] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.530031] ? check_noncircular+0x20/0x20 [ 558.530045] ? perf_trace_lock+0x900/0x900 [ 558.530060] ? __lock_acquire+0x6e9/0x47f0 [ 558.530067] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.530076] ? __lock_acquire+0x6e9/0x47f0 [ 558.530089] ? lock_downgrade+0x980/0x980 [ 558.530106] ? lock_acquire+0x1d5/0x580 [ 558.530132] ? find_held_lock+0x39/0x1d0 [ 558.530163] ? lock_downgrade+0x980/0x980 [ 558.530176] ? __handle_mm_fault+0x2698/0x3e20 [ 558.530199] ? lock_release+0xda0/0xda0 [ 558.530206] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.530216] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.530230] ? do_raw_spin_trylock+0x190/0x190 [ 558.530243] ? perf_trace_lock+0x900/0x900 [ 558.530254] ? perf_trace_lock+0x900/0x900 [ 558.530277] __handle_mm_fault+0x353a/0x3e20 [ 558.530283] ? check_noncircular+0x20/0x20 [ 558.530303] ? __pmd_alloc+0x4e0/0x4e0 [ 558.530315] ? find_held_lock+0x39/0x1d0 [ 558.530346] ? lock_downgrade+0x980/0x980 [ 558.530356] ? __lock_is_held+0xbc/0x140 [ 558.530422] handle_mm_fault+0x334/0x8d0 [ 558.530431] ? down_read+0x96/0x150 [ 558.530443] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.530451] ? vmacache_find+0x5f/0x280 [ 558.530469] ? find_vma+0x30/0x150 [ 558.530508] __do_page_fault+0x5c9/0xc90 [ 558.530524] ? refill_pi_state_cache.part.6+0x2f0/0x2f0 [ 558.530550] ? mm_fault_error+0x2c0/0x2c0 [ 558.530568] ? check_noncircular+0x20/0x20 [ 558.530583] ? futex_wait_setup+0x22e/0x3d0 [ 558.530603] do_page_fault+0xee/0x720 [ 558.530620] ? __do_page_fault+0xc90/0xc90 [ 558.530628] ? check_noncircular+0x20/0x20 [ 558.530652] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.530671] ? find_held_lock+0x39/0x1d0 [ 558.530698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.530723] page_fault+0x22/0x30 [ 558.530733] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.530738] RSP: 0018:ffff8801c9aff790 EFLAGS: 00010246 [ 558.530747] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.530752] RDX: 00000000000000cc RSI: ffffc90002f4d000 RDI: ffff8801c9affb90 [ 558.530757] RBP: ffff8801c9aff870 R08: 1ffff10038b8618a R09: 0000000000000000 [ 558.530762] R10: ffff8801d51441c0 R11: 0000000000000000 R12: 1ffff1003935fef5 [ 558.530767] R13: ffff8801c9aff848 R14: 0000000000000000 R15: ffff8801c9affb88 [ 558.530793] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.530822] ? iov_iter_revert+0x9d0/0x9d0 [ 558.530841] ? mark_held_locks+0xb2/0x100 [ 558.530850] ? simple_xattr_get+0xeb/0x160 [ 558.530862] ? current_kernel_time64+0x122/0x2f0 [ 558.530876] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.530894] generic_perform_write+0x200/0x600 [ 558.530938] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.530948] ? current_time+0x88/0xc0 [ 558.530963] ? file_update_time+0xbf/0x470 [ 558.530978] ? current_time+0xc0/0xc0 [ 558.530998] ? down_write+0x87/0x120 [ 558.531018] __generic_file_write_iter+0x366/0x5b0 [ 558.531028] ? check_noncircular+0x20/0x20 [ 558.531049] generic_file_write_iter+0x399/0x7a0 [ 558.531069] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.531087] ? iov_iter_init+0xaf/0x1d0 [ 558.531105] __vfs_write+0x68a/0x970 [ 558.531123] ? kernel_read+0x120/0x120 [ 558.531175] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.531186] ? __sb_start_write+0x203/0x290 [ 558.531203] vfs_write+0x18f/0x510 [ 558.531222] SyS_write+0xef/0x220 [ 558.531230] ? security_file_ioctl+0x89/0xb0 [ 558.531244] ? SyS_read+0x220/0x220 [ 558.531258] ? do_fast_syscall_32+0x156/0xf9d [ 558.531274] ? SyS_read+0x220/0x220 [ 558.531286] do_fast_syscall_32+0x3ee/0xf9d [ 558.531297] ? do_raw_spin_trylock+0x190/0x190 [ 558.531316] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.531337] ? lockdep_sys_exit+0x47/0xf0 [ 558.531348] ? syscall_return_slowpath+0x2ad/0x550 [ 558.531358] ? prepare_exit_to_usermode+0x340/0x340 [ 558.531371] ? sysret32_from_system_call+0x5/0x3b [ 558.531391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.531414] entry_SYSENTER_compat+0x51/0x60 [ 558.531421] RIP: 0023:0xf7febc79 [ 558.531426] RSP: 002b:00000000f77e708c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 558.531434] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000020011fd2 [ 558.531439] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.531443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.531447] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.531452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.531500] CPU: 1 PID: 17191 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 558.531505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.531508] Call Trace: [ 558.531520] dump_stack+0x194/0x257 [ 558.531538] ? arch_local_irq_restore+0x53/0x53 [ 558.531560] ? handle_userfault+0x12b7/0x24c0 [ 558.531581] handle_userfault+0x12fa/0x24c0 [ 558.531590] ? handle_userfault+0x150b/0x24c0 [ 558.531625] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.531641] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.531653] ? check_noncircular+0x20/0x20 [ 558.531675] ? print_usage_bug+0x3f0/0x3f0 [ 558.531685] ? print_usage_bug+0x3f0/0x3f0 [ 558.531696] ? switched_to_fair+0xb0/0xb0 [ 558.531704] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.531717] ? trace_hardirqs_on+0xd/0x10 [ 558.531732] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.531753] ? check_noncircular+0x20/0x20 [ 558.531765] ? perf_trace_lock+0x900/0x900 [ 558.531778] ? __lock_acquire+0x6e9/0x47f0 [ 558.531789] ? __lock_acquire+0x6e9/0x47f0 [ 558.531800] ? lock_downgrade+0x980/0x980 [ 558.531816] ? lock_acquire+0x1d5/0x580 [ 558.531839] ? find_held_lock+0x39/0x1d0 [ 558.531869] ? lock_downgrade+0x980/0x980 [ 558.531882] ? __handle_mm_fault+0x2698/0x3e20 [ 558.531905] ? lock_release+0xda0/0xda0 [ 558.531912] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.531923] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.531938] ? do_raw_spin_trylock+0x190/0x190 [ 558.531952] ? perf_trace_lock+0x900/0x900 [ 558.531961] ? perf_trace_lock+0x900/0x900 [ 558.531991] __handle_mm_fault+0x353a/0x3e20 [ 558.532000] ? check_noncircular+0x20/0x20 [ 558.532028] ? __pmd_alloc+0x4e0/0x4e0 [ 558.532042] ? find_held_lock+0x39/0x1d0 [ 558.532077] ? lock_downgrade+0x980/0x980 [ 558.532089] ? __lock_is_held+0xbc/0x140 [ 558.532157] handle_mm_fault+0x334/0x8d0 [ 558.532168] ? down_read+0x96/0x150 [ 558.532179] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.532186] ? vmacache_find+0x5f/0x280 [ 558.532204] ? find_vma+0x30/0x150 [ 558.532221] __do_page_fault+0x5c9/0xc90 [ 558.532247] ? mm_fault_error+0x2c0/0x2c0 [ 558.532278] do_page_fault+0xee/0x720 [ 558.532291] ? __do_page_fault+0xc90/0xc90 [ 558.532304] ? lock_release+0xda0/0xda0 [ 558.532325] ? do_raw_spin_trylock+0x190/0x190 [ 558.532344] ? inode_dio_wait+0x530/0x530 [ 558.532363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.532388] page_fault+0x22/0x30 [ 558.532397] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.532402] RSP: 0018:ffff8801a5777790 EFLAGS: 00010246 [ 558.532410] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.532415] RDX: 000000000000010e RSI: ffffc90001fae000 RDI: ffff8801a5777b90 [ 558.532420] RBP: ffff8801a5777870 R08: 1ffffffff0d30b63 R09: 1ffff10034aeeeac [ 558.532425] R10: ffff8801c0ccc300 R11: 0000000000000003 R12: 1ffff10034aeeef5 [ 558.532431] R13: ffff8801a5777848 R14: 0000000000000000 R15: ffff8801a5777b88 [ 558.532455] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.532483] ? iov_iter_revert+0x9d0/0x9d0 [ 558.532501] ? mark_held_locks+0xb2/0x100 [ 558.532509] ? simple_xattr_get+0xeb/0x160 [ 558.532519] ? current_kernel_time64+0x122/0x2f0 [ 558.532532] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.532550] generic_perform_write+0x200/0x600 [ 558.532588] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.532594] ? generic_update_time+0x1b2/0x270 [ 558.532609] ? __mnt_drop_write_file+0xd/0x70 [ 558.532619] ? file_update_time+0xbf/0x470 [ 558.532634] ? current_time+0xc0/0xc0 [ 558.532655] ? down_write+0x87/0x120 [ 558.532675] __generic_file_write_iter+0x366/0x5b0 [ 558.532684] ? check_noncircular+0x20/0x20 [ 558.532707] generic_file_write_iter+0x399/0x7a0 [ 558.532729] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.532748] ? iov_iter_init+0xaf/0x1d0 [ 558.532770] __vfs_write+0x68a/0x970 [ 558.532789] ? kernel_read+0x120/0x120 [ 558.532848] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.532861] ? __sb_start_write+0x203/0x290 [ 558.532880] vfs_write+0x18f/0x510 [ 558.532901] SyS_write+0xef/0x220 [ 558.532910] ? security_file_ioctl+0x89/0xb0 [ 558.532926] ? SyS_read+0x220/0x220 [ 558.532942] ? do_fast_syscall_32+0x156/0xf9d [ 558.532960] ? SyS_read+0x220/0x220 [ 558.532974] do_fast_syscall_32+0x3ee/0xf9d [ 558.532992] ? do_raw_spin_trylock+0x190/0x190 [ 558.533011] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.533035] ? lockdep_sys_exit+0x47/0xf0 [ 558.533046] ? syscall_return_slowpath+0x2ad/0x550 [ 558.533058] ? prepare_exit_to_usermode+0x340/0x340 [ 558.533072] ? sysret32_from_system_call+0x5/0x3b [ 558.533094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.533118] entry_SYSENTER_compat+0x51/0x60 [ 558.533124] RIP: 0023:0xf7f0fc79 [ 558.533128] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 558.533138] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000020011fd2 [ 558.533143] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.533147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.533152] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.533156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.537277] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.537277] program syz-executor0 not setting count and/or reply_len properly [ 558.602329] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.602329] program syz-executor0 not setting count and/or reply_len properly [ 558.616483] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.616497] CPU: 1 PID: 17193 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #114 [ 558.616504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.616509] Call Trace: [ 558.616523] dump_stack+0x194/0x257 [ 558.616538] ? arch_local_irq_restore+0x53/0x53 [ 558.616557] ? handle_userfault+0x12b7/0x24c0 [ 558.616576] handle_userfault+0x12fa/0x24c0 [ 558.616586] ? handle_userfault+0x150b/0x24c0 [ 558.616617] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.616636] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.616650] ? check_noncircular+0x20/0x20 [ 558.616671] ? print_usage_bug+0x3f0/0x3f0 [ 558.616683] ? print_usage_bug+0x3f0/0x3f0 [ 558.616698] ? perf_event_sync_stat+0x5b0/0x5b0 [ 558.616711] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.616728] ? check_noncircular+0x20/0x20 [ 558.616743] ? __lock_acquire+0x6e9/0x47f0 [ 558.616753] ? __lock_acquire+0x6e9/0x47f0 [ 558.616762] ? lock_downgrade+0x980/0x980 [ 558.616775] ? lock_acquire+0x1d5/0x580 [ 558.616795] ? find_held_lock+0x39/0x1d0 [ 558.616821] ? lock_downgrade+0x980/0x980 [ 558.616832] ? __handle_mm_fault+0x2698/0x3e20 [ 558.616851] ? lock_release+0xda0/0xda0 [ 558.616860] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.616874] ? do_raw_spin_trylock+0x190/0x190 [ 558.616883] ? userfaultfd_ctx_put+0x740/0x740 [ 558.616909] __handle_mm_fault+0x353a/0x3e20 [ 558.616915] ? check_noncircular+0x20/0x20 [ 558.616932] ? __pmd_alloc+0x4e0/0x4e0 [ 558.616945] ? find_held_lock+0x39/0x1d0 [ 558.616971] ? lock_downgrade+0x980/0x980 [ 558.616980] ? __lock_is_held+0xbc/0x140 [ 558.617037] handle_mm_fault+0x334/0x8d0 [ 558.617046] ? down_read+0x96/0x150 [ 558.617056] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.617063] ? vmacache_find+0x5f/0x280 [ 558.617079] ? find_vma+0x30/0x150 [ 558.617097] __do_page_fault+0x5c9/0xc90 [ 558.617111] ? refill_pi_state_cache.part.6+0x2f0/0x2f0 [ 558.617134] ? mm_fault_error+0x2c0/0x2c0 [ 558.617147] ? check_noncircular+0x20/0x20 [ 558.617166] do_page_fault+0xee/0x720 [ 558.617178] ? __do_page_fault+0xc90/0xc90 [ 558.617184] ? check_noncircular+0x20/0x20 [ 558.617196] ? perf_trace_lock+0x900/0x900 [ 558.617207] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.617221] ? find_held_lock+0x39/0x1d0 [ 558.617242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.617263] page_fault+0x22/0x30 [ 558.617272] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.617277] RSP: 0018:ffff8801c9aff790 EFLAGS: 00010246 [ 558.617285] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.617290] RDX: 00000000000000cc RSI: ffffc90002f4d000 RDI: ffff8801c9affb90 [ 558.617295] RBP: ffff8801c9aff870 R08: 1ffff10038b8618a R09: 0000000000000000 [ 558.617299] R10: ffff8801d51441c0 R11: 0000000000000000 R12: 1ffff1003935fef5 [ 558.617304] R13: ffff8801c9aff848 R14: 0000000000000000 R15: ffff8801c9affb88 [ 558.617326] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.617351] ? iov_iter_revert+0x9d0/0x9d0 [ 558.617367] ? mark_held_locks+0xb2/0x100 [ 558.617374] ? simple_xattr_get+0xeb/0x160 [ 558.617384] ? current_kernel_time64+0x122/0x2f0 [ 558.617397] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.617412] generic_perform_write+0x200/0x600 [ 558.617445] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.617454] ? current_time+0x88/0xc0 [ 558.617468] ? file_update_time+0xbf/0x470 [ 558.617481] ? current_time+0xc0/0xc0 [ 558.617498] ? down_write+0x87/0x120 [ 558.617514] __generic_file_write_iter+0x366/0x5b0 [ 558.617522] ? check_noncircular+0x20/0x20 [ 558.617540] generic_file_write_iter+0x399/0x7a0 [ 558.617558] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.617574] ? iov_iter_init+0xaf/0x1d0 [ 558.617588] __vfs_write+0x68a/0x970 [ 558.617604] ? kernel_read+0x120/0x120 [ 558.617647] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.617656] ? __sb_start_write+0x203/0x290 [ 558.617671] vfs_write+0x18f/0x510 [ 558.617688] SyS_write+0xef/0x220 [ 558.617696] ? security_file_ioctl+0x89/0xb0 [ 558.617708] ? SyS_read+0x220/0x220 [ 558.617720] ? do_fast_syscall_32+0x156/0xf9d [ 558.617734] ? SyS_read+0x220/0x220 [ 558.617745] do_fast_syscall_32+0x3ee/0xf9d [ 558.617754] ? do_raw_spin_trylock+0x190/0x190 [ 558.617771] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.617789] ? lockdep_sys_exit+0x47/0xf0 [ 558.617799] ? syscall_return_slowpath+0x2ad/0x550 [ 558.617808] ? prepare_exit_to_usermode+0x340/0x340 [ 558.617819] ? sysret32_from_system_call+0x5/0x3b [ 558.617836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.617856] entry_SYSENTER_compat+0x51/0x60 [ 558.617863] RIP: 0023:0xf7febc79 [ 558.617867] RSP: 002b:00000000f77e708c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 558.617875] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000020011fd2 [ 558.617880] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.617884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.617888] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.617892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.654790] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.654802] CPU: 1 PID: 17223 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #114 [ 558.654810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.654814] Call Trace: [ 558.654830] dump_stack+0x194/0x257 [ 558.654849] ? arch_local_irq_restore+0x53/0x53 [ 558.654873] ? handle_userfault+0x12b7/0x24c0 [ 558.654891] handle_userfault+0x12fa/0x24c0 [ 558.654904] ? handle_userfault+0x150b/0x24c0 [ 558.654935] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.654955] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.654968] ? check_noncircular+0x20/0x20 [ 558.654997] ? print_usage_bug+0x3f0/0x3f0 [ 558.655012] ? print_usage_bug+0x3f0/0x3f0 [ 558.655034] ? perf_event_sync_stat+0x5b0/0x5b0 [ 558.655049] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.655069] ? check_noncircular+0x20/0x20 [ 558.655089] ? __lock_acquire+0x6e9/0x47f0 [ 558.655100] ? __lock_acquire+0x6e9/0x47f0 [ 558.655112] ? lock_downgrade+0x980/0x980 [ 558.655129] ? lock_acquire+0x1d5/0x580 [ 558.655153] ? find_held_lock+0x39/0x1d0 [ 558.655180] ? lock_downgrade+0x980/0x980 [ 558.655191] ? __handle_mm_fault+0x2698/0x3e20 [ 558.655211] ? lock_release+0xda0/0xda0 [ 558.655220] ? perf_trace_lock_acquire+0xe3/0x980 [ 558.655234] ? do_raw_spin_trylock+0x190/0x190 [ 558.655243] ? userfaultfd_ctx_put+0x740/0x740 [ 558.655269] __handle_mm_fault+0x353a/0x3e20 [ 558.655276] ? check_noncircular+0x20/0x20 [ 558.655293] ? __pmd_alloc+0x4e0/0x4e0 [ 558.655303] ? find_held_lock+0x39/0x1d0 [ 558.655329] ? lock_downgrade+0x980/0x980 [ 558.655338] ? __lock_is_held+0xbc/0x140 [ 558.655391] handle_mm_fault+0x334/0x8d0 [ 558.655400] ? down_read+0x96/0x150 [ 558.655410] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.655417] ? vmacache_find+0x5f/0x280 [ 558.655433] ? find_vma+0x30/0x150 [ 558.655449] __do_page_fault+0x5c9/0xc90 [ 558.655470] ? mm_fault_error+0x2c0/0x2c0 [ 558.655496] do_page_fault+0xee/0x720 [ 558.655508] ? __do_page_fault+0xc90/0xc90 [ 558.655520] ? lock_release+0xda0/0xda0 [ 558.655526] ? perf_trace_lock+0x900/0x900 [ 558.655543] ? do_raw_spin_trylock+0x190/0x190 [ 558.655560] ? inode_dio_wait+0x530/0x530 [ 558.655574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.655595] page_fault+0x22/0x30 [ 558.655604] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.655609] RSP: 0018:ffff8801d3497790 EFLAGS: 00010246 [ 558.655616] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.655622] RDX: 000000000000010e RSI: ffffc90002cc8000 RDI: ffff8801d3497b90 [ 558.655626] RBP: ffff8801d3497870 R08: 1ffffffff0d30b63 R09: 1ffff1003a692eac [ 558.655631] R10: ffff8801b4e560c0 R11: 0000000000000003 R12: 1ffff1003a692ef5 [ 558.655636] R13: ffff8801d3497848 R14: 0000000000000000 R15: ffff8801d3497b88 [ 558.655658] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.655682] ? iov_iter_revert+0x9d0/0x9d0 [ 558.655697] ? mark_held_locks+0xb2/0x100 [ 558.655704] ? simple_xattr_get+0xeb/0x160 [ 558.655715] ? current_kernel_time64+0x122/0x2f0 [ 558.655728] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.655743] generic_perform_write+0x200/0x600 [ 558.655775] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.655782] ? generic_update_time+0x1b2/0x270 [ 558.655793] ? __mnt_drop_write_file+0xd/0x70 [ 558.655802] ? file_update_time+0xbf/0x470 [ 558.655815] ? current_time+0xc0/0xc0 [ 558.655832] ? down_write+0x87/0x120 [ 558.655850] __generic_file_write_iter+0x366/0x5b0 [ 558.655858] ? check_noncircular+0x20/0x20 [ 558.655876] generic_file_write_iter+0x399/0x7a0 [ 558.655894] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.655910] ? iov_iter_init+0xaf/0x1d0 [ 558.655925] __vfs_write+0x68a/0x970 [ 558.655940] ? kernel_read+0x120/0x120 [ 558.655987] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.655997] ? __sb_start_write+0x203/0x290 [ 558.656011] vfs_write+0x18f/0x510 [ 558.656027] SyS_write+0xef/0x220 [ 558.656035] ? security_file_ioctl+0x89/0xb0 [ 558.656047] ? SyS_read+0x220/0x220 [ 558.656059] ? do_fast_syscall_32+0x156/0xf9d [ 558.656073] ? SyS_read+0x220/0x220 [ 558.656083] do_fast_syscall_32+0x3ee/0xf9d [ 558.656093] ? do_raw_spin_trylock+0x190/0x190 [ 558.656109] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.656127] ? lockdep_sys_exit+0x47/0xf0 [ 558.656137] ? syscall_return_slowpath+0x2ad/0x550 [ 558.656147] ? prepare_exit_to_usermode+0x340/0x340 [ 558.656158] ? sysret32_from_system_call+0x5/0x3b [ 558.656175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.656195] entry_SYSENTER_compat+0x51/0x60 [ 558.656201] RIP: 0023:0xf7f88c79 [ 558.656205] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 558.656213] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020011fd2 [ 558.656218] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.656222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.656226] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.656231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.662428] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.662428] program syz-executor0 not setting count and/or reply_len properly [ 558.696420] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.696434] CPU: 0 PID: 17240 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 558.696441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.696447] Call Trace: [ 558.696462] dump_stack+0x194/0x257 [ 558.696488] ? arch_local_irq_restore+0x53/0x53 [ 558.696511] ? handle_userfault+0x12b7/0x24c0 [ 558.696531] handle_userfault+0x12fa/0x24c0 [ 558.696542] ? handle_userfault+0x150b/0x24c0 [ 558.696569] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.696588] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.696601] ? check_noncircular+0x20/0x20 [ 558.696615] ? __perf_event_task_sched_out+0x268/0x1400 [ 558.696628] ? set_next_entity+0x2ed/0xd70 [ 558.696641] ? print_usage_bug+0x3f0/0x3f0 [ 558.696652] ? print_usage_bug+0x3f0/0x3f0 [ 558.696668] ? perf_event_sync_stat+0x5b0/0x5b0 [ 558.696680] ? __perf_event_task_sched_in+0x200/0xc20 [ 558.696700] ? check_noncircular+0x20/0x20 [ 558.696717] ? __lock_acquire+0x6e9/0x47f0 [ 558.696727] ? __lock_acquire+0x6e9/0x47f0 [ 558.696738] ? lock_downgrade+0x980/0x980 [ 558.696752] ? lock_acquire+0x1d5/0x580 [ 558.696774] ? find_held_lock+0x39/0x1d0 [ 558.696802] ? lock_downgrade+0x980/0x980 [ 558.696815] ? __handle_mm_fault+0x2698/0x3e20 [ 558.696830] ? finish_task_switch+0x1d3/0x740 [ 558.696844] ? lock_release+0xda0/0xda0 [ 558.696863] ? do_raw_spin_trylock+0x190/0x190 [ 558.696874] ? userfaultfd_ctx_put+0x740/0x740 [ 558.696902] __handle_mm_fault+0x353a/0x3e20 [ 558.696909] ? check_noncircular+0x20/0x20 [ 558.696928] ? __pmd_alloc+0x4e0/0x4e0 [ 558.696939] ? find_held_lock+0x39/0x1d0 [ 558.696967] ? lock_downgrade+0x980/0x980 [ 558.696976] ? __lock_is_held+0xbc/0x140 [ 558.697037] handle_mm_fault+0x334/0x8d0 [ 558.697048] ? down_read+0x96/0x150 [ 558.697059] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.697066] ? vmacache_find+0x5f/0x280 [ 558.697082] ? find_vma+0x30/0x150 [ 558.697097] __do_page_fault+0x5c9/0xc90 [ 558.697108] ? refill_pi_state_cache.part.6+0x2f0/0x2f0 [ 558.697127] ? mm_fault_error+0x2c0/0x2c0 [ 558.697141] ? check_noncircular+0x20/0x20 [ 558.697152] ? futex_wait_setup+0x22e/0x3d0 [ 558.697167] do_page_fault+0xee/0x720 [ 558.697180] ? __do_page_fault+0xc90/0xc90 [ 558.697187] ? check_noncircular+0x20/0x20 [ 558.697206] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.697222] ? find_held_lock+0x39/0x1d0 [ 558.697245] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.697268] page_fault+0x22/0x30 [ 558.697279] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.697284] RSP: 0018:ffff8801d8417790 EFLAGS: 00010246 [ 558.697293] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.697299] RDX: 00000000000000cc RSI: ffffc90001fae000 RDI: ffff8801d8417b90 [ 558.697306] RBP: ffff8801d8417870 R08: 1ffff10038ab844a R09: 0000000000000000 [ 558.697313] R10: ffff8801cecb6380 R11: 0000000000000000 R12: 1ffff1003b082ef5 [ 558.697319] R13: ffff8801d8417848 R14: 0000000000000000 R15: ffff8801d8417b88 [ 558.697345] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.697369] ? iov_iter_revert+0x9d0/0x9d0 [ 558.697386] ? mark_held_locks+0xb2/0x100 [ 558.697396] ? simple_xattr_get+0xeb/0x160 [ 558.697408] ? current_kernel_time64+0x122/0x2f0 [ 558.697422] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.697440] generic_perform_write+0x200/0x600 [ 558.697473] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.697493] ? current_time+0x88/0xc0 [ 558.697507] ? file_update_time+0xbf/0x470 [ 558.697520] ? current_time+0xc0/0xc0 [ 558.697536] ? down_write+0x87/0x120 [ 558.697552] __generic_file_write_iter+0x366/0x5b0 [ 558.697561] ? check_noncircular+0x20/0x20 [ 558.697578] generic_file_write_iter+0x399/0x7a0 [ 558.697595] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.697609] ? iov_iter_init+0xaf/0x1d0 [ 558.697624] __vfs_write+0x68a/0x970 [ 558.697638] ? kernel_read+0x120/0x120 [ 558.697676] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.697687] ? __sb_start_write+0x203/0x290 [ 558.697701] vfs_write+0x18f/0x510 [ 558.697718] SyS_write+0xef/0x220 [ 558.697726] ? security_file_ioctl+0x89/0xb0 [ 558.697738] ? SyS_read+0x220/0x220 [ 558.697750] ? do_fast_syscall_32+0x156/0xf9d [ 558.697763] ? SyS_read+0x220/0x220 [ 558.697773] do_fast_syscall_32+0x3ee/0xf9d [ 558.697793] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.697805] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 558.697818] ? lockdep_sys_exit+0x47/0xf0 [ 558.697828] ? syscall_return_slowpath+0x2ad/0x550 [ 558.697843] ? sysret32_from_system_call+0x5/0x3b [ 558.697862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.697883] entry_SYSENTER_compat+0x51/0x60 [ 558.697889] RIP: 0023:0xf7f0fc79 [ 558.697894] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 558.697902] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000020011fd2 [ 558.697907] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.697912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.697916] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.697921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.735067] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.735080] CPU: 1 PID: 17229 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #114 [ 558.735086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.735091] Call Trace: [ 558.735106] dump_stack+0x194/0x257 [ 558.735126] ? arch_local_irq_restore+0x53/0x53 [ 558.735147] ? handle_userfault+0x12b7/0x24c0 [ 558.735168] handle_userfault+0x12fa/0x24c0 [ 558.735182] ? handle_userfault+0x150b/0x24c0 [ 558.735214] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.735235] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.735248] ? check_noncircular+0x20/0x20 [ 558.735260] ? __perf_event_task_sched_out+0x268/0x1400 [ 558.735271] ? set_next_entity+0x2ed/0xd70 [ 558.735282] ? print_usage_bug+0x3f0/0x3f0 [ 558.735291] ? print_usage_bug+0x3f0/0x3f0 [ 558.735305] ? perf_event_sync_stat+0x5b0/0x5b0 [ 558.735315] ? __perf_event_task_sched_in+0x200/0xc20 [ 558.735335] ? check_noncircular+0x20/0x20 [ 558.735350] ? __lock_acquire+0x6e9/0x47f0 [ 558.735359] ? __lock_acquire+0x6e9/0x47f0 [ 558.735369] ? lock_downgrade+0x980/0x980 [ 558.735382] ? lock_acquire+0x1d5/0x580 [ 558.735391] ? finish_task_switch+0x1aa/0x740 [ 558.735409] ? find_held_lock+0x39/0x1d0 [ 558.735435] ? lock_downgrade+0x980/0x980 [ 558.735446] ? __handle_mm_fault+0x2698/0x3e20 [ 558.735458] ? finish_task_switch+0x1d3/0x740 [ 558.735471] ? lock_release+0xda0/0xda0 [ 558.735481] ? copy_overflow+0x20/0x20 [ 558.735496] ? do_raw_spin_trylock+0x190/0x190 [ 558.735505] ? userfaultfd_ctx_put+0x740/0x740 [ 558.735531] __handle_mm_fault+0x353a/0x3e20 [ 558.735537] ? check_noncircular+0x20/0x20 [ 558.735554] ? __pmd_alloc+0x4e0/0x4e0 [ 558.735564] ? find_held_lock+0x39/0x1d0 [ 558.735590] ? lock_downgrade+0x980/0x980 [ 558.735598] ? __lock_is_held+0xbc/0x140 [ 558.735651] handle_mm_fault+0x334/0x8d0 [ 558.735660] ? down_read+0x96/0x150 [ 558.735671] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.735678] ? vmacache_find+0x5f/0x280 [ 558.735693] ? find_vma+0x30/0x150 [ 558.735708] __do_page_fault+0x5c9/0xc90 [ 558.735729] ? mm_fault_error+0x2c0/0x2c0 [ 558.735755] do_page_fault+0xee/0x720 [ 558.735768] ? __do_page_fault+0xc90/0xc90 [ 558.735780] ? lock_release+0xda0/0xda0 [ 558.735797] ? do_raw_spin_trylock+0x190/0x190 [ 558.735814] ? inode_dio_wait+0x530/0x530 [ 558.735828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.735849] page_fault+0x22/0x30 [ 558.735858] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.735862] RSP: 0018:ffff8801c1027790 EFLAGS: 00010246 [ 558.735870] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.735875] RDX: 000000000000010e RSI: ffffc90002d49000 RDI: ffff8801c1027b90 [ 558.735880] RBP: ffff8801c1027870 R08: 1ffffffff0d30b63 R09: 1ffff10038204eac [ 558.735884] R10: ffff8801d778e280 R11: 0000000000000003 R12: 1ffff10038204ef5 [ 558.735889] R13: ffff8801c1027848 R14: 0000000000000000 R15: ffff8801c1027b88 [ 558.735911] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.735938] ? iov_iter_revert+0x9d0/0x9d0 [ 558.735955] ? mark_held_locks+0xb2/0x100 [ 558.735962] ? simple_xattr_get+0xeb/0x160 [ 558.735972] ? current_kernel_time64+0x122/0x2f0 [ 558.735988] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.736004] generic_perform_write+0x200/0x600 [ 558.736041] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.736051] ? generic_update_time+0x1b2/0x270 [ 558.736064] ? __mnt_drop_write_file+0xd/0x70 [ 558.736074] ? file_update_time+0xbf/0x470 [ 558.736087] ? current_time+0xc0/0xc0 [ 558.736104] ? down_write+0x87/0x120 [ 558.736120] __generic_file_write_iter+0x366/0x5b0 [ 558.736128] ? check_noncircular+0x20/0x20 [ 558.736146] generic_file_write_iter+0x399/0x7a0 [ 558.736164] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.736180] ? iov_iter_init+0xaf/0x1d0 [ 558.736196] __vfs_write+0x68a/0x970 [ 558.736211] ? kernel_read+0x120/0x120 [ 558.736256] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.736265] ? __sb_start_write+0x203/0x290 [ 558.736279] vfs_write+0x18f/0x510 [ 558.736296] SyS_write+0xef/0x220 [ 558.736303] ? security_file_ioctl+0x89/0xb0 [ 558.736316] ? SyS_read+0x220/0x220 [ 558.736328] ? do_fast_syscall_32+0x156/0xf9d [ 558.736341] ? SyS_read+0x220/0x220 [ 558.736352] do_fast_syscall_32+0x3ee/0xf9d [ 558.736362] ? do_raw_spin_trylock+0x190/0x190 [ 558.736378] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.736396] ? lockdep_sys_exit+0x47/0xf0 [ 558.736406] ? syscall_return_slowpath+0x2ad/0x550 [ 558.736415] ? prepare_exit_to_usermode+0x340/0x340 [ 558.736427] ? sysret32_from_system_call+0x5/0x3b [ 558.736444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.736464] entry_SYSENTER_compat+0x51/0x60 [ 558.736470] RIP: 0023:0xf7f88c79 [ 558.736474] RSP: 002b:00000000f776308c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 558.736483] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000020011fd2 [ 558.736487] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.736491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.736495] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.736499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.740680] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.740690] CPU: 1 PID: 17240 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 558.740696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.740700] Call Trace: [ 558.740713] dump_stack+0x194/0x257 [ 558.740730] ? arch_local_irq_restore+0x53/0x53 [ 558.740750] ? handle_userfault+0x12b7/0x24c0 [ 558.740768] handle_userfault+0x12fa/0x24c0 [ 558.740779] ? handle_userfault+0x150b/0x24c0 [ 558.740807] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.740825] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.740836] ? check_noncircular+0x20/0x20 [ 558.740847] ? __perf_event_task_sched_out+0x268/0x1400 [ 558.740858] ? set_next_entity+0x2ed/0xd70 [ 558.740868] ? print_usage_bug+0x3f0/0x3f0 [ 558.740877] ? print_usage_bug+0x3f0/0x3f0 [ 558.740892] ? perf_event_sync_stat+0x5b0/0x5b0 [ 558.740902] ? __perf_event_task_sched_in+0x200/0xc20 [ 558.740921] ? check_noncircular+0x20/0x20 [ 558.740937] ? __lock_acquire+0x6e9/0x47f0 [ 558.740947] ? __lock_acquire+0x6e9/0x47f0 [ 558.740956] ? lock_downgrade+0x980/0x980 [ 558.740969] ? lock_acquire+0x1d5/0x580 [ 558.740993] ? find_held_lock+0x39/0x1d0 [ 558.741020] ? lock_downgrade+0x980/0x980 [ 558.741031] ? __handle_mm_fault+0x2698/0x3e20 [ 558.741044] ? finish_task_switch+0x1d3/0x740 [ 558.741057] ? lock_release+0xda0/0xda0 [ 558.741067] ? copy_overflow+0x20/0x20 [ 558.741081] ? do_raw_spin_trylock+0x190/0x190 [ 558.741090] ? userfaultfd_ctx_put+0x740/0x740 [ 558.741116] __handle_mm_fault+0x353a/0x3e20 [ 558.741123] ? check_noncircular+0x20/0x20 [ 558.741139] ? __pmd_alloc+0x4e0/0x4e0 [ 558.741150] ? find_held_lock+0x39/0x1d0 [ 558.741176] ? lock_downgrade+0x980/0x980 [ 558.741184] ? __lock_is_held+0xbc/0x140 [ 558.741238] handle_mm_fault+0x334/0x8d0 [ 558.741246] ? down_read+0x96/0x150 [ 558.741257] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.741264] ? vmacache_find+0x5f/0x280 [ 558.741279] ? find_vma+0x30/0x150 [ 558.741295] __do_page_fault+0x5c9/0xc90 [ 558.741316] ? mm_fault_error+0x2c0/0x2c0 [ 558.741343] do_page_fault+0xee/0x720 [ 558.741355] ? __do_page_fault+0xc90/0xc90 [ 558.741367] ? lock_release+0xda0/0xda0 [ 558.741385] ? do_raw_spin_trylock+0x190/0x190 [ 558.741401] ? inode_dio_wait+0x530/0x530 [ 558.741416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.741436] page_fault+0x22/0x30 [ 558.741446] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.741450] RSP: 0018:ffff8801d8417790 EFLAGS: 00010246 [ 558.741457] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.741462] RDX: 000000000000010e RSI: ffffc90001fae000 RDI: ffff8801d8417b90 [ 558.741467] RBP: ffff8801d8417870 R08: 1ffffffff0d30b63 R09: 1ffff1003b082eac [ 558.741471] R10: ffff8801cecb6380 R11: 0000000000000003 R12: 1ffff1003b082ef5 [ 558.741476] R13: ffff8801d8417848 R14: 0000000000000000 R15: ffff8801d8417b88 [ 558.741497] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.741521] ? iov_iter_revert+0x9d0/0x9d0 [ 558.741537] ? mark_held_locks+0xb2/0x100 [ 558.741544] ? simple_xattr_get+0xeb/0x160 [ 558.741554] ? current_kernel_time64+0x122/0x2f0 [ 558.741567] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.741582] generic_perform_write+0x200/0x600 [ 558.741614] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.741621] ? generic_update_time+0x1b2/0x270 [ 558.741632] ? __mnt_drop_write_file+0xd/0x70 [ 558.741642] ? file_update_time+0xbf/0x470 [ 558.741655] ? current_time+0xc0/0xc0 [ 558.741672] ? down_write+0x87/0x120 [ 558.741689] __generic_file_write_iter+0x366/0x5b0 [ 558.741697] ? check_noncircular+0x20/0x20 [ 558.741714] generic_file_write_iter+0x399/0x7a0 [ 558.741732] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.741747] ? iov_iter_init+0xaf/0x1d0 [ 558.741763] __vfs_write+0x68a/0x970 [ 558.741779] ? kernel_read+0x120/0x120 [ 558.741822] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.741831] ? __sb_start_write+0x203/0x290 [ 558.741846] vfs_write+0x18f/0x510 [ 558.741863] SyS_write+0xef/0x220 [ 558.741877] ? SyS_read+0x220/0x220 [ 558.741889] ? do_fast_syscall_32+0x156/0xf9d [ 558.741902] ? SyS_read+0x220/0x220 [ 558.741913] do_fast_syscall_32+0x3ee/0xf9d [ 558.741933] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.741946] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 558.741958] ? lockdep_sys_exit+0x47/0xf0 [ 558.741967] ? syscall_return_slowpath+0x2ad/0x550 [ 558.741985] ? sysret32_from_system_call+0x5/0x3b [ 558.742003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.742023] entry_SYSENTER_compat+0x51/0x60 [ 558.742029] RIP: 0023:0xf7f0fc79 [ 558.742033] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 558.742041] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020011fd2 [ 558.742045] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.742049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.742054] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.742058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.790570] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.790570] program syz-executor0 not setting count and/or reply_len properly [ 558.794787] FAULT_FLAG_ALLOW_RETRY missing 30 [ 558.794801] CPU: 0 PID: 17265 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #114 [ 558.794807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.794815] Call Trace: [ 558.794831] dump_stack+0x194/0x257 [ 558.794849] ? arch_local_irq_restore+0x53/0x53 [ 558.794859] ? rb_erase_cached+0xf50/0x3540 [ 558.794870] ? check_noncircular+0x20/0x20 [ 558.794877] ? lock_downgrade+0x980/0x980 [ 558.794889] ? handle_userfault+0x12b7/0x24c0 [ 558.794904] handle_userfault+0x12fa/0x24c0 [ 558.794912] ? handle_userfault+0x150b/0x24c0 [ 558.794938] ? userfaultfd_ioctl+0x4520/0x4520 [ 558.794953] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 558.794976] ? print_usage_bug+0x3f0/0x3f0 [ 558.794984] ? print_usage_bug+0x3f0/0x3f0 [ 558.795008] ? update_cfs_rq_load_avg.part.70+0x2d0/0x2d0 [ 558.795020] ? can_migrate_task+0x1560/0x1560 [ 558.795033] ? check_noncircular+0x20/0x20 [ 558.795050] ? __lock_acquire+0x6e9/0x47f0 [ 558.795059] ? __lock_acquire+0x6e9/0x47f0 [ 558.795074] ? check_noncircular+0x20/0x20 [ 558.795099] ? find_held_lock+0x39/0x1d0 [ 558.795126] ? lock_downgrade+0x980/0x980 [ 558.795138] ? __handle_mm_fault+0x2698/0x3e20 [ 558.795161] ? lock_release+0xda0/0xda0 [ 558.795174] ? update_curr+0x2e6/0x9a0 [ 558.795181] ? __enqueue_entity+0x109/0x1e0 [ 558.795194] ? do_raw_spin_trylock+0x190/0x190 [ 558.795204] ? userfaultfd_ctx_put+0x740/0x740 [ 558.795215] ? enqueue_task_fair+0x3b1/0x2950 [ 558.795237] __handle_mm_fault+0x353a/0x3e20 [ 558.795244] ? check_noncircular+0x20/0x20 [ 558.795259] ? __pmd_alloc+0x4e0/0x4e0 [ 558.795268] ? find_held_lock+0x39/0x1d0 [ 558.795292] ? lock_downgrade+0x980/0x980 [ 558.795301] ? __lock_is_held+0xbc/0x140 [ 558.795356] handle_mm_fault+0x334/0x8d0 [ 558.795367] ? down_read+0x96/0x150 [ 558.795377] ? __handle_mm_fault+0x3e20/0x3e20 [ 558.795385] ? vmacache_find+0x5f/0x280 [ 558.795400] ? find_vma+0x30/0x150 [ 558.795417] __do_page_fault+0x5c9/0xc90 [ 558.795438] ? mm_fault_error+0x2c0/0x2c0 [ 558.795464] do_page_fault+0xee/0x720 [ 558.795477] ? __do_page_fault+0xc90/0xc90 [ 558.795500] ? lock_release+0xda0/0xda0 [ 558.795522] ? do_raw_spin_trylock+0x190/0x190 [ 558.795542] ? inode_dio_wait+0x530/0x530 [ 558.795557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.795578] page_fault+0x22/0x30 [ 558.795588] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 558.795593] RSP: 0018:ffff8801b95c7790 EFLAGS: 00010246 [ 558.795602] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 558.795607] RDX: 000000000000010e RSI: ffffc90002f4d000 RDI: ffff8801b95c7b90 [ 558.795611] RBP: ffff8801b95c7870 R08: 1ffffffff0d30b63 R09: 1ffff100372b8eac [ 558.795616] R10: ffff8801d8fca280 R11: 0000000000000003 R12: 1ffff100372b8ef5 [ 558.795621] R13: ffff8801b95c7848 R14: 0000000000000000 R15: ffff8801b95c7b88 [ 558.795643] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 558.795666] ? iov_iter_revert+0x9d0/0x9d0 [ 558.795682] ? mark_held_locks+0xb2/0x100 [ 558.795690] ? simple_xattr_get+0xeb/0x160 [ 558.795701] ? current_kernel_time64+0x122/0x2f0 [ 558.795714] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 558.795730] generic_perform_write+0x200/0x600 [ 558.795761] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 558.795768] ? generic_update_time+0x1b2/0x270 [ 558.795780] ? __mnt_drop_write_file+0xd/0x70 [ 558.795789] ? file_update_time+0xbf/0x470 [ 558.795801] ? current_time+0xc0/0xc0 [ 558.795818] ? down_write+0x87/0x120 [ 558.795834] __generic_file_write_iter+0x366/0x5b0 [ 558.795841] ? check_noncircular+0x20/0x20 [ 558.795858] generic_file_write_iter+0x399/0x7a0 [ 558.795877] ? __generic_file_write_iter+0x5b0/0x5b0 [ 558.795892] ? iov_iter_init+0xaf/0x1d0 [ 558.795909] __vfs_write+0x68a/0x970 [ 558.795925] ? kernel_read+0x120/0x120 [ 558.795970] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 558.795979] ? __sb_start_write+0x203/0x290 [ 558.795993] vfs_write+0x18f/0x510 [ 558.796011] SyS_write+0xef/0x220 [ 558.796018] ? exit_to_usermode_loop+0x198/0x310 [ 558.796032] ? SyS_read+0x220/0x220 [ 558.796045] ? do_fast_syscall_32+0x156/0xf9d [ 558.796060] ? SyS_read+0x220/0x220 [ 558.796072] do_fast_syscall_32+0x3ee/0xf9d [ 558.796094] ? do_int80_syscall_32+0x9d0/0x9d0 [ 558.796104] ? _raw_spin_unlock_irq+0x56/0x70 [ 558.796119] ? lockdep_sys_exit+0x47/0xf0 [ 558.796129] ? syscall_return_slowpath+0x2ad/0x550 [ 558.796138] ? prepare_exit_to_usermode+0x340/0x340 [ 558.796149] ? sysret32_from_system_call+0x5/0x3b [ 558.796167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.796186] entry_SYSENTER_compat+0x51/0x60 [ 558.796192] RIP: 0023:0xf7febc79 [ 558.796196] RSP: 002b:00000000f77e708c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 2017/12/02 09:13:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x5e}]}) r0 = syz_open_dev$sndseq(&(0x7f000039c000-0xd)="2f6465762f736e642f73657100", 0x0, 0x182) close(r0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f000049b000-0xb)="2f6465762f766373612300", 0x105f175129, 0x800) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f000003d000-0x4)=@int=0x2, 0x4) sched_getparam(r1, &(0x7f000092d000)=0x0) gettid() r3 = socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt(r3, 0x5411, &(0x7f00004f4000-0x1000)="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") 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000ec9000-0xf2)="851476f954a5616511b67c749750d2bc2fb63ee677063cf7be6c2efd31dd89588312d90038a9e053c301dfcb01386e66b37ddafa038b80e0f68dd0bf78518d476e3f0e2bdb8c2567584e1628b1ec3d9fad2f6581509b25f207b7e0023a0cd071fde3005b915f399f89169df6cc3d728deb1e6e64fed699b2dd5874a549aedd11a85c865bb0905ff89289f614b8b1b675cc50e6d760f933baf5b346152d239f27914e090c9f5b1407aa2b93201744b1ab1d00b55079c865809bc653e946d749da5dcab3779050f0ef618b7ed09f885bf49ed33c858ce0415027ee66e7e4a85143fdd4e0f52b9248f60c29d392ebe05fc1421c", 0xf2) mlockall(0x4) 2017/12/02 09:13:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000181000)="2f6465762f696e7075742f6d69636500", 0x0, 0x22000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00002a1000)=0x200) 2017/12/02 09:13:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) getpgid(0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f00001cb000-0x10)="2e2f636f6e74726f6c00", 0x1) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000456000+0x832)="") write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:50 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000060f000)="2f6465762f7161745f6164665f63746c00", 0x80080, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f000098c000)=0x0, &(0x7f0000741000-0x4)=0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) connect$ax25(r2, &(0x7f0000dff000-0x10)={0x3, {"9a4c635f884920"}, 0x9}, 0x10) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) pipe(&(0x7f00007e6000-0x8)={0x0, 0x0}) unlink(&(0x7f0000687000)="2e2f66696c653000") renameat(r0, &(0x7f0000af8000-0x8)="2e2f66696c653000", r0, &(0x7f0000662000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:50 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f00009f7000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:50 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) r2 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$read(0xb, r2, &(0x7f000031a000)="0000000000000000000000", 0xb) [ 558.796205] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000020011fd2 [ 558.796210] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 558.796214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.796217] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.796222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.826711] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 558.826711] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f000002d000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000511000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mlockall(0x4) 2017/12/02 09:13:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = openat(0xffffffffffffff9c, &(0x7f00006af000-0x8)="2e2f66696c653000", 0x60040, 0x2) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f000098a000-0x4)=0x0, &(0x7f0000a55000-0x4)=0x4) 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) pipe(&(0x7f0000af0000)={0x0, 0x0}) r2 = gettid() perf_event_open(&(0x7f0000e63000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0}, r2, 0xffffffffffffffff, r1, 0x0) mlockall(0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f000049f000-0x8)={0x7, &(0x7f0000755000-0x40c)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) bind$alg(r0, &(0x7f0000929000-0x58)={0x26, "736b636970686572000000000000", 0x0, 0x0, "6563622861726334292d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) process_vm_readv(r2, &(0x7f00004a4000)=[{&(0x7f00004f7000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x85}, {&(0x7f0000cd7000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000c23000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xcf}, {&(0x7f0000253000-0x8a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8a}, {&(0x7f0000c6d000-0x50)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x50}], 0x5, &(0x7f0000eeb000-0x8)=[{&(0x7f0000076000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}], 0x1, 0x0) 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000ddd000-0x9)="2f6465762f72746300", 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000c69000)="5c17b6e984f87b5847c1dfeef43d908ea4353ee4062e81d965471e5a353cf85a7191495df51a729ab304ab4aa69ee02fedd46319240ca9097236804ad6dc8fb28f511825ffe3d73d5717b53968c3d8b689a183b590187b5acf536df388ce747f0fcb20b07915f31c477e313b6cfb34843fac611c4432bc9a8d83b0fc3f60ae876c2cbaf21d1b7fea65b0a038b4ccc398783b7dc0e12cd768ae80e904") mlockall(0x2) 2017/12/02 09:13:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000aa5000)="2f6465762f73657175656e6365723200", 0x200140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00003b6000)={0xd, 0x1, &(0x7f0000b5d000)=[@map={0x4, 0x7, 0x7, r1}], &(0x7f0000eb2000-0x19)="2e216264657623706f7369785f61636c5f6163636573738800", 0xfff, 0x79, &(0x7f0000578000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4, 0x1}, 0x30) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000924000-0x20)={@common="697036746e6c30000000000000000000", @ifru_flags=0x0}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000957000)="2f6465762f76637300", 0x240, 0x0) lstat(&(0x7f0000ddb000)="2e2f66696c653000", &(0x7f0000272000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00008aa000)="2e2f66696c653000", &(0x7f0000576000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00009a3000-0x8)="2e2f66696c653000", r3, r4, 0x0) [ 563.410670] sg_write: 10 callbacks suppressed [ 563.410710] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 563.410710] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000d5f000)={0x1, 0xffffffffffffffff, 0x1}) ioctl$TIOCEXCL(r0, 0x540c) gettid() 2017/12/02 09:13:50 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00003fd000+0xe5e)="2f6465762f76637300", 0x200, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x665) r2 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0186404, &(0x7f00007ad000)={&(0x7f0000ad8000/0x3000)=nil, 0x4, 0x2, 0x0, &(0x7f0000897000/0x2000)=nil, 0x0}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00004d3000)=[0x1, 0x1]) mlockall(0x4) 2017/12/02 09:13:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f0000261000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000abd000)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f0000994000-0x8)="2e2f66696c653000", 0x10) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000ad6000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000374000-0x8)={r5, 0x1}) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0186404, &(0x7f0000ac9000)={&(0x7f00008b6000/0x3000)=nil, 0x3f, 0x0, 0x0, &(0x7f0000fb6000/0x3000)=nil, 0x2}) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f000038b000-0x28)={0x5, 0x401, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000440000-0x14)={0x9, 0x7, 0x401, 0x3, 0x4}) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 563.483672] handle_userfault: 33 callbacks suppressed [ 563.483678] FAULT_FLAG_ALLOW_RETRY missing 30 [ 563.495547] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 563.495547] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:50 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000da7000-0x10)={{0x77359400, 0x0}, {0x0, 0x989680}}, &(0x7f0000883000)={{0x0, 0x0}, {0x0, 0x0}}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00003ca000)={0x0, 0x4cc, 0x4, 0x8}, &(0x7f0000438000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f000054d000)={r2, @in={{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10001, 0x1f, 0x100, 0xffffffffffff0001, 0x9}, &(0x7f000058b000-0x4)=0xa0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 563.526405] audit: type=1326 audit(1512206030.182:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=17506 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 [ 563.530815] FAULT_FLAG_ALLOW_RETRY missing 30 [ 563.530828] CPU: 0 PID: 17464 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #114 [ 563.530835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.530841] Call Trace: [ 563.530857] dump_stack+0x194/0x257 [ 563.530876] ? arch_local_irq_restore+0x53/0x53 [ 563.530896] ? handle_userfault+0x12b7/0x24c0 [ 563.530915] handle_userfault+0x12fa/0x24c0 [ 563.530926] ? handle_userfault+0x150b/0x24c0 [ 563.530959] ? userfaultfd_ioctl+0x4520/0x4520 [ 563.530981] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 563.530993] ? check_noncircular+0x20/0x20 [ 563.531009] ? set_next_entity+0x2ed/0xd70 [ 563.531021] ? print_usage_bug+0x3f0/0x3f0 [ 563.531031] ? print_usage_bug+0x3f0/0x3f0 [ 563.531041] ? switched_to_fair+0xb0/0xb0 [ 563.531051] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 563.531063] ? trace_hardirqs_on+0xd/0x10 [ 563.531074] ? get_user_pages_fast+0x14e/0x340 [ 563.531096] ? check_noncircular+0x20/0x20 [ 563.531114] ? __lock_acquire+0x6e9/0x47f0 [ 563.531125] ? __lock_acquire+0x6e9/0x47f0 [ 563.531134] ? lock_downgrade+0x980/0x980 [ 563.531149] ? lock_acquire+0x1d5/0x580 [ 563.531171] ? find_held_lock+0x39/0x1d0 [ 563.531197] ? lock_downgrade+0x980/0x980 [ 563.531209] ? __handle_mm_fault+0x2698/0x3e20 [ 563.531223] ? finish_task_switch+0x1d3/0x740 [ 563.531237] ? lock_release+0xda0/0xda0 [ 563.531256] ? do_raw_spin_trylock+0x190/0x190 [ 563.531267] ? userfaultfd_ctx_put+0x740/0x740 [ 563.531295] __handle_mm_fault+0x353a/0x3e20 [ 563.531305] ? check_noncircular+0x20/0x20 [ 563.531322] ? __pmd_alloc+0x4e0/0x4e0 [ 563.531333] ? find_held_lock+0x39/0x1d0 [ 563.531371] ? lock_downgrade+0x980/0x980 [ 563.531385] ? __lock_is_held+0xbc/0x140 [ 563.531444] handle_mm_fault+0x334/0x8d0 [ 563.531456] ? down_read+0x96/0x150 [ 563.531468] ? __handle_mm_fault+0x3e20/0x3e20 [ 563.531477] ? vmacache_find+0x5f/0x280 [ 563.531494] ? find_vma+0x30/0x150 [ 563.531511] __do_page_fault+0x5c9/0xc90 [ 563.531533] ? mm_fault_error+0x2c0/0x2c0 [ 563.531561] do_page_fault+0xee/0x720 [ 563.531576] ? __do_page_fault+0xc90/0xc90 [ 563.531590] ? lock_release+0xda0/0xda0 [ 563.531609] ? do_raw_spin_trylock+0x190/0x190 [ 563.531627] ? inode_dio_wait+0x530/0x530 [ 563.531643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.531665] page_fault+0x22/0x30 [ 563.531677] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 563.531683] RSP: 0018:ffff8801c024f790 EFLAGS: 00010246 [ 563.531691] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 563.531697] RDX: 000000000000010e RSI: ffffc90002cc8000 RDI: ffff8801c024fb90 [ 563.531702] RBP: ffff8801c024f870 R08: 1ffffffff0d30b63 R09: 1ffff10038049eac [ 563.531708] R10: ffff8801c32c8200 R11: 0000000000000003 R12: 1ffff10038049ef5 [ 563.531713] R13: ffff8801c024f848 R14: 0000000000000000 R15: ffff8801c024fb88 [ 563.531736] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 563.531762] ? iov_iter_revert+0x9d0/0x9d0 [ 563.531779] ? mark_held_locks+0xb2/0x100 [ 563.531788] ? simple_xattr_get+0xeb/0x160 [ 563.531801] ? current_kernel_time64+0x122/0x2f0 [ 563.531816] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 563.531832] generic_perform_write+0x200/0x600 [ 563.531865] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 563.531872] ? generic_update_time+0x1b2/0x270 [ 563.531885] ? __mnt_drop_write_file+0xd/0x70 [ 563.531896] ? file_update_time+0xbf/0x470 [ 563.531910] ? current_time+0xc0/0xc0 [ 563.531930] ? down_write+0x87/0x120 [ 563.531945] __generic_file_write_iter+0x366/0x5b0 [ 563.531954] ? check_noncircular+0x20/0x20 [ 563.531973] generic_file_write_iter+0x399/0x7a0 [ 563.531992] ? __generic_file_write_iter+0x5b0/0x5b0 [ 563.532009] ? iov_iter_init+0xaf/0x1d0 [ 563.532025] __vfs_write+0x68a/0x970 [ 563.532042] ? kernel_read+0x120/0x120 [ 563.532088] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 563.532099] ? __sb_start_write+0x203/0x290 [ 563.532114] vfs_write+0x18f/0x510 [ 563.532132] SyS_write+0xef/0x220 [ 563.532140] ? security_file_ioctl+0x89/0xb0 [ 563.532152] ? SyS_read+0x220/0x220 [ 563.532165] ? do_fast_syscall_32+0x156/0xf9d [ 563.532180] ? SyS_read+0x220/0x220 [ 563.532191] do_fast_syscall_32+0x3ee/0xf9d [ 563.532202] ? do_raw_spin_trylock+0x190/0x190 [ 563.532220] ? do_int80_syscall_32+0x9d0/0x9d0 [ 563.532240] ? lockdep_sys_exit+0x47/0xf0 [ 563.532251] ? syscall_return_slowpath+0x2ad/0x550 [ 563.532262] ? prepare_exit_to_usermode+0x340/0x340 [ 563.532275] ? sysret32_from_system_call+0x5/0x3b [ 563.532292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.532315] entry_SYSENTER_compat+0x51/0x60 [ 563.532322] RIP: 0023:0xf7f88c79 [ 563.532327] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 563.532336] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020011fd2 [ 563.532341] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 563.532345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.532350] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 563.532354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.553188] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 563.553188] program syz-executor0 not setting count and/or reply_len properly [ 563.561883] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 563.561883] program syz-executor0 not setting count and/or reply_len properly [ 563.599273] audit: type=1326 audit(1512206030.255:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=17506 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 [ 563.635173] FAULT_FLAG_ALLOW_RETRY missing 30 [ 563.635196] CPU: 0 PID: 17515 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #114 [ 563.635204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.635209] Call Trace: [ 563.635224] dump_stack+0x194/0x257 [ 563.635244] ? arch_local_irq_restore+0x53/0x53 [ 563.635253] ? rb_erase_cached+0xf50/0x3540 [ 563.635263] ? check_noncircular+0x20/0x20 [ 563.635272] ? lock_downgrade+0x980/0x980 [ 563.635284] ? handle_userfault+0x12b7/0x24c0 [ 563.635300] handle_userfault+0x12fa/0x24c0 [ 563.635307] ? handle_userfault+0x150b/0x24c0 [ 563.635334] ? userfaultfd_ioctl+0x4520/0x4520 [ 563.635349] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 563.635390] ? print_usage_bug+0x3f0/0x3f0 [ 563.635402] ? print_usage_bug+0x3f0/0x3f0 [ 563.635431] ? update_cfs_rq_load_avg.part.70+0x2d0/0x2d0 [ 563.635446] ? can_migrate_task+0x1560/0x1560 [ 563.635460] ? check_noncircular+0x20/0x20 [ 563.635479] ? __lock_acquire+0x6e9/0x47f0 [ 563.635490] ? __lock_acquire+0x6e9/0x47f0 [ 563.635507] ? check_noncircular+0x20/0x20 [ 563.635528] ? find_held_lock+0x39/0x1d0 [ 563.635555] ? lock_downgrade+0x980/0x980 [ 563.635565] ? __handle_mm_fault+0x2698/0x3e20 [ 563.635585] ? lock_release+0xda0/0xda0 [ 563.635597] ? update_curr+0x2e6/0x9a0 [ 563.635603] ? __enqueue_entity+0x109/0x1e0 [ 563.635615] ? do_raw_spin_trylock+0x190/0x190 [ 563.635624] ? userfaultfd_ctx_put+0x740/0x740 [ 563.635634] ? enqueue_task_fair+0x3b1/0x2950 [ 563.635655] __handle_mm_fault+0x353a/0x3e20 [ 563.635661] ? check_noncircular+0x20/0x20 [ 563.635677] ? __pmd_alloc+0x4e0/0x4e0 [ 563.635688] ? find_held_lock+0x39/0x1d0 [ 563.635713] ? lock_downgrade+0x980/0x980 [ 563.635722] ? __lock_is_held+0xbc/0x140 [ 563.635775] handle_mm_fault+0x334/0x8d0 [ 563.635783] ? down_read+0x96/0x150 [ 563.635793] ? __handle_mm_fault+0x3e20/0x3e20 [ 563.635801] ? vmacache_find+0x5f/0x280 [ 563.635816] ? find_vma+0x30/0x150 [ 563.635832] __do_page_fault+0x5c9/0xc90 [ 563.635853] ? mm_fault_error+0x2c0/0x2c0 [ 563.635879] do_page_fault+0xee/0x720 [ 563.635891] ? __do_page_fault+0xc90/0xc90 [ 563.635903] ? lock_release+0xda0/0xda0 [ 563.635922] ? do_raw_spin_trylock+0x190/0x190 [ 563.635938] ? inode_dio_wait+0x530/0x530 [ 563.635953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.635974] page_fault+0x22/0x30 [ 563.635983] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 563.635988] RSP: 0018:ffff8801b95c7790 EFLAGS: 00010246 [ 563.635995] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 563.636000] RDX: 000000000000010e RSI: ffffc90002cc8000 RDI: ffff8801b95c7b90 [ 563.636005] RBP: ffff8801b95c7870 R08: 1ffffffff0d30b63 R09: 1ffff100372b8eac [ 563.636009] R10: ffff8801c3ba0240 R11: 0000000000000003 R12: 1ffff100372b8ef5 [ 563.636014] R13: ffff8801b95c7848 R14: 0000000000000000 R15: ffff8801b95c7b88 [ 563.636036] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 563.636060] ? iov_iter_revert+0x9d0/0x9d0 [ 563.636076] ? mark_held_locks+0xb2/0x100 [ 563.636083] ? simple_xattr_get+0xeb/0x160 [ 563.636094] ? current_kernel_time64+0x122/0x2f0 [ 563.636106] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 563.636121] generic_perform_write+0x200/0x600 [ 563.636154] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 563.636160] ? generic_update_time+0x1b2/0x270 [ 563.636172] ? __mnt_drop_write_file+0xd/0x70 [ 563.636181] ? file_update_time+0xbf/0x470 [ 563.636194] ? current_time+0xc0/0xc0 [ 563.636212] ? down_write+0x87/0x120 [ 563.636229] __generic_file_write_iter+0x366/0x5b0 [ 563.636237] ? check_noncircular+0x20/0x20 [ 563.636254] generic_file_write_iter+0x399/0x7a0 [ 563.636272] ? __generic_file_write_iter+0x5b0/0x5b0 [ 563.636287] ? iov_iter_init+0xaf/0x1d0 [ 563.636302] __vfs_write+0x68a/0x970 [ 563.636317] ? kernel_read+0x120/0x120 [ 563.636363] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 563.636372] ? __sb_start_write+0x203/0x290 [ 563.636388] vfs_write+0x18f/0x510 [ 563.636403] SyS_write+0xef/0x220 [ 563.636410] ? exit_to_usermode_loop+0x198/0x310 [ 563.636423] ? SyS_read+0x220/0x220 [ 563.636435] ? do_fast_syscall_32+0x156/0xf9d [ 563.636448] ? SyS_read+0x220/0x220 [ 563.636459] do_fast_syscall_32+0x3ee/0xf9d [ 563.636468] ? do_raw_spin_trylock+0x190/0x190 [ 563.636484] ? do_int80_syscall_32+0x9d0/0x9d0 [ 563.636504] ? lockdep_sys_exit+0x47/0xf0 [ 563.636513] ? syscall_return_slowpath+0x2ad/0x550 [ 563.636522] ? prepare_exit_to_usermode+0x340/0x340 [ 563.636533] ? sysret32_from_system_call+0x5/0x3b [ 563.636551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.636571] entry_SYSENTER_compat+0x51/0x60 [ 563.636577] RIP: 0023:0xf7f88c79 [ 563.636581] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 563.636590] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020011fd2 [ 563.636594] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 563.636598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.636602] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 563.636606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.578577] CPU: 1 PID: 17467 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 2017/12/02 09:13:51 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00002ea000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:51 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000001000-0xb)="2f6465762f766373612300", 0x7, 0x26200) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x3, 0x6, @loopback={0x0, 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x308fbaa8, 0x8000, 0xb4d5, 0x0, 0x100000001, 0x5, 0x4, 0x0, 0x7, 0x200, 0x3ff, 0x1, 0x3, 0x2]}, &(0x7f0000001000)=0x108) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001000)={r2, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001, 0x3, 0x10001, 0x9, 0x10}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000c0f000-0x8)="6b657972696e6700", &(0x7f00009af000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000c15000-0x8)="6b657972696e6700", &(0x7f0000312000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r3, 0x0, 0x0, r4) r5 = getpgrp(0x0) fcntl$lock(r0, 0x0, &(0x7f0000f19000-0x10)={0xa075d30fd335514c, 0x4, 0x100, 0x5, r5}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00003b2000-0x16)="6e65742f69705f7461626c65735f7461726765747300") ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000725000-0x4)=0xfffffffffffffff8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000c9f000)=0xff, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000814000)={{{@in=@multicast1=0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000220000)=0xe8) stat(&(0x7f0000fdc000)="2e2f66696c653000", &(0x7f0000ea3000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x1e) syz_fuse_mount(&(0x7f00007be000-0x8)="2e2f66696c653000", 0x1000, r7, r8, 0x80, 0x20) r9 = creat(&(0x7f00005e9000)="2e2f66696c653000", 0x50) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f00006ab000)=0x80000000, 0x2) mlockall(0x4) 2017/12/02 09:13:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000b43000-0x8)=0x4000) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) r4 = inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, &(0x7f000034f000)={0x8001, 0x0, 0x0, 0x3ff}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40086437, &(0x7f0000068000)={r6, 0x3fe}) syz_open_dev$sndtimer(&(0x7f0000627000)="2f6465762f736e642f74696d657200", 0x0, 0x8100) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000e36000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000936000-0x4)=0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000795000)=0x7d) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f0000ebf000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_extract_tcp_res(&(0x7f0000fce000)={0x0, 0x0}, 0x61400000000, 0x0) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = syz_open_dev$usbmon(&(0x7f00001c5000-0xd)="2f6465762f7573626d6f6e2300", 0x3, 0x400000) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000335000-0x28)={0x4, 0xfffffffffffffffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) gettid() 2017/12/02 09:13:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:51 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:51 executing program 3: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCNOTTY(r2, 0x5422) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:51 executing program 7: pipe2(&(0x7f0000aaf000)={0x0, 0x0}, 0x800) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f000088e000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x13139d13, 0x100000001, 0x0, 0x0, 0x7fffffff, 0x4000, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa5d4, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000fec000)="2f6465762f7573626d6f6e2300", 0x1, 0x800) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000327000-0x10)={0x6, [0x81, 0xfffffffffffffffc, 0x9, 0x7f, 0x9, 0x6]}, &(0x7f0000061000)=0x10) 2017/12/02 09:13:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00005ad000)="2f6465762f72666b696c6c00", 0x18100, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f000096f000-0x4)=0x6, 0x4) mlockall(0x4) [ 564.578581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.578584] Call Trace: [ 564.578600] dump_stack+0x194/0x257 [ 564.578615] ? arch_local_irq_restore+0x53/0x53 [ 564.578631] ? handle_userfault+0x12b7/0x24c0 [ 564.578643] handle_userfault+0x12fa/0x24c0 [ 564.578651] ? handle_userfault+0x150b/0x24c0 [ 564.578678] ? userfaultfd_ioctl+0x4520/0x4520 [ 564.578694] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 564.578704] ? check_noncircular+0x20/0x20 [ 564.578720] ? set_next_entity+0x2ed/0xd70 [ 564.578730] ? print_usage_bug+0x3f0/0x3f0 [ 564.578740] ? print_usage_bug+0x3f0/0x3f0 [ 564.578748] ? switched_to_fair+0xb0/0xb0 [ 564.578754] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.578764] ? trace_hardirqs_on+0xd/0x10 [ 564.578775] ? get_user_pages_fast+0x14e/0x340 [ 564.578796] ? check_noncircular+0x20/0x20 [ 564.578811] ? __lock_acquire+0x6e9/0x47f0 [ 564.578820] ? __lock_acquire+0x6e9/0x47f0 [ 564.578829] ? lock_downgrade+0x980/0x980 [ 564.578846] ? lock_acquire+0x1d5/0x580 [ 564.578866] ? find_held_lock+0x39/0x1d0 [ 564.578892] ? lock_downgrade+0x980/0x980 [ 564.578902] ? __handle_mm_fault+0x2698/0x3e20 [ 564.578915] ? finish_task_switch+0x1d3/0x740 [ 564.578928] ? lock_release+0xda0/0xda0 [ 564.578945] ? do_raw_spin_trylock+0x190/0x190 [ 564.578955] ? userfaultfd_ctx_put+0x740/0x740 [ 564.578980] __handle_mm_fault+0x353a/0x3e20 [ 564.578987] ? check_noncircular+0x20/0x20 [ 564.579006] ? __pmd_alloc+0x4e0/0x4e0 [ 564.579016] ? find_held_lock+0x39/0x1d0 [ 564.579042] ? lock_downgrade+0x980/0x980 [ 564.579051] ? __lock_is_held+0xbc/0x140 [ 564.579105] handle_mm_fault+0x334/0x8d0 [ 564.579113] ? down_read+0x96/0x150 [ 564.579124] ? __handle_mm_fault+0x3e20/0x3e20 [ 564.579130] ? vmacache_find+0x5f/0x280 [ 564.579145] ? find_vma+0x30/0x150 [ 564.579161] __do_page_fault+0x5c9/0xc90 [ 564.579182] ? mm_fault_error+0x2c0/0x2c0 [ 564.579208] do_page_fault+0xee/0x720 [ 564.579220] ? __do_page_fault+0xc90/0xc90 [ 564.579232] ? lock_release+0xda0/0xda0 [ 564.579249] ? do_raw_spin_trylock+0x190/0x190 [ 564.579266] ? inode_dio_wait+0x530/0x530 [ 564.579280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.579301] page_fault+0x22/0x30 [ 564.579310] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 564.579315] RSP: 0018:ffff8801ba87f790 EFLAGS: 00010246 [ 564.579322] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 564.579327] RDX: 000000000000010e RSI: ffffc90001fae000 RDI: ffff8801ba87fb90 [ 564.579331] RBP: ffff8801ba87f870 R08: 1ffffffff0d30b63 R09: 1ffff1003750feac [ 564.579336] R10: ffff8801d82b02c0 R11: 0000000000000003 R12: 1ffff1003750fef5 [ 564.579340] R13: ffff8801ba87f848 R14: 0000000000000000 R15: ffff8801ba87fb88 [ 564.579358] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 564.579382] ? iov_iter_revert+0x9d0/0x9d0 [ 564.579397] ? mark_held_locks+0xb2/0x100 [ 564.579405] ? simple_xattr_get+0xeb/0x160 [ 564.579415] ? current_kernel_time64+0x122/0x2f0 [ 564.579427] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.579443] generic_perform_write+0x200/0x600 [ 564.579476] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 564.579482] ? generic_update_time+0x1b2/0x270 [ 564.579493] ? __mnt_drop_write_file+0xd/0x70 [ 564.579502] ? file_update_time+0xbf/0x470 [ 564.579515] ? current_time+0xc0/0xc0 [ 564.579532] ? down_write+0x87/0x120 [ 564.579548] __generic_file_write_iter+0x366/0x5b0 [ 564.579556] ? check_noncircular+0x20/0x20 [ 564.579573] generic_file_write_iter+0x399/0x7a0 [ 564.579591] ? __generic_file_write_iter+0x5b0/0x5b0 [ 564.579607] ? iov_iter_init+0xaf/0x1d0 [ 564.579623] __vfs_write+0x68a/0x970 [ 564.579638] ? kernel_read+0x120/0x120 [ 564.579681] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 564.579690] ? __sb_start_write+0x203/0x290 [ 564.579705] vfs_write+0x18f/0x510 [ 564.579721] SyS_write+0xef/0x220 [ 564.579729] ? security_file_ioctl+0x89/0xb0 [ 564.579741] ? SyS_read+0x220/0x220 [ 564.579753] ? do_fast_syscall_32+0x156/0xf9d [ 564.579767] ? SyS_read+0x220/0x220 [ 564.579777] do_fast_syscall_32+0x3ee/0xf9d [ 564.579788] ? do_raw_spin_trylock+0x190/0x190 [ 564.579804] ? do_int80_syscall_32+0x9d0/0x9d0 [ 564.579823] ? lockdep_sys_exit+0x47/0xf0 [ 564.579833] ? syscall_return_slowpath+0x2ad/0x550 [ 564.579846] ? prepare_exit_to_usermode+0x340/0x340 [ 564.579857] ? sysret32_from_system_call+0x5/0x3b [ 564.579874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.579894] entry_SYSENTER_compat+0x51/0x60 [ 564.579900] RIP: 0023:0xf7f0fc79 [ 564.579903] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 564.579911] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000020011fd2 [ 564.579915] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 564.579919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.579924] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.579928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.608593] audit: type=1326 audit(1512206031.264:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=17527 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 [ 564.633127] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 564.633127] program syz-executor0 not setting count and/or reply_len properly [ 564.669349] audit: type=1326 audit(1512206031.325:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=17527 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 [ 564.697713] FAULT_FLAG_ALLOW_RETRY missing 30 [ 564.697724] CPU: 0 PID: 17538 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 564.697730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.697734] Call Trace: [ 564.697748] dump_stack+0x194/0x257 [ 564.697765] ? arch_local_irq_restore+0x53/0x53 [ 564.697785] ? handle_userfault+0x12b7/0x24c0 [ 564.697803] handle_userfault+0x12fa/0x24c0 [ 564.697811] ? handle_userfault+0x150b/0x24c0 [ 564.697837] ? userfaultfd_ioctl+0x4520/0x4520 [ 564.697853] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 564.697864] ? check_noncircular+0x20/0x20 [ 564.697878] ? set_next_entity+0x2ed/0xd70 [ 564.697889] ? print_usage_bug+0x3f0/0x3f0 [ 564.697897] ? print_usage_bug+0x3f0/0x3f0 [ 564.697906] ? switched_to_fair+0xb0/0xb0 [ 564.697913] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.697923] ? trace_hardirqs_on+0xd/0x10 [ 564.697933] ? get_user_pages_fast+0x14e/0x340 [ 564.697954] ? check_noncircular+0x20/0x20 [ 564.697972] ? __lock_acquire+0x6e9/0x47f0 [ 564.697982] ? __lock_acquire+0x6e9/0x47f0 [ 564.697992] ? lock_downgrade+0x980/0x980 [ 564.698010] ? lock_acquire+0x1d5/0x580 [ 564.698033] ? find_held_lock+0x39/0x1d0 [ 564.698067] ? lock_downgrade+0x980/0x980 [ 564.698079] ? __handle_mm_fault+0x2698/0x3e20 [ 564.698095] ? finish_task_switch+0x1d3/0x740 [ 564.698110] ? lock_release+0xda0/0xda0 [ 564.698129] ? do_raw_spin_trylock+0x190/0x190 [ 564.698140] ? userfaultfd_ctx_put+0x740/0x740 [ 564.698168] __handle_mm_fault+0x353a/0x3e20 [ 564.698174] ? check_noncircular+0x20/0x20 [ 564.698191] ? __pmd_alloc+0x4e0/0x4e0 [ 564.698201] ? find_held_lock+0x39/0x1d0 [ 564.698227] ? lock_downgrade+0x980/0x980 [ 564.698235] ? __lock_is_held+0xbc/0x140 [ 564.698288] handle_mm_fault+0x334/0x8d0 [ 564.698297] ? down_read+0x96/0x150 [ 564.698306] ? __handle_mm_fault+0x3e20/0x3e20 [ 564.698313] ? vmacache_find+0x5f/0x280 [ 564.698328] ? find_vma+0x30/0x150 [ 564.698348] __do_page_fault+0x5c9/0xc90 [ 564.698370] ? mm_fault_error+0x2c0/0x2c0 [ 564.698396] do_page_fault+0xee/0x720 [ 564.698408] ? __do_page_fault+0xc90/0xc90 [ 564.698422] ? lock_release+0xda0/0xda0 [ 564.698441] ? do_raw_spin_trylock+0x190/0x190 [ 564.698459] ? inode_dio_wait+0x530/0x530 [ 564.698474] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.698495] page_fault+0x22/0x30 [ 564.698506] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 564.698510] RSP: 0018:ffff8801d0327790 EFLAGS: 00010246 [ 564.698517] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 564.698522] RDX: 000000000000010e RSI: ffffc90001fae000 RDI: ffff8801d0327b90 [ 564.698527] RBP: ffff8801d0327870 R08: 1ffffffff0d30b63 R09: 1ffff1003a064eac [ 564.698531] R10: ffff8801d86a4040 R11: 0000000000000003 R12: 1ffff1003a064ef5 [ 564.698536] R13: ffff8801d0327848 R14: 0000000000000000 R15: ffff8801d0327b88 [ 564.698557] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 564.698581] ? iov_iter_revert+0x9d0/0x9d0 [ 564.698596] ? mark_held_locks+0xb2/0x100 [ 564.698604] ? simple_xattr_get+0xeb/0x160 [ 564.698614] ? current_kernel_time64+0x122/0x2f0 [ 564.698626] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.698642] generic_perform_write+0x200/0x600 [ 564.698673] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 564.698680] ? generic_update_time+0x1b2/0x270 [ 564.698691] ? __mnt_drop_write_file+0xd/0x70 [ 564.698700] ? file_update_time+0xbf/0x470 [ 564.698713] ? current_time+0xc0/0xc0 [ 564.698731] ? down_write+0x87/0x120 [ 564.698747] __generic_file_write_iter+0x366/0x5b0 [ 564.698755] ? check_noncircular+0x20/0x20 [ 564.698773] generic_file_write_iter+0x399/0x7a0 [ 564.698790] ? __generic_file_write_iter+0x5b0/0x5b0 [ 564.698806] ? iov_iter_init+0xaf/0x1d0 [ 564.698820] __vfs_write+0x68a/0x970 [ 564.698835] ? kernel_read+0x120/0x120 [ 564.698877] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 564.698886] ? __sb_start_write+0x203/0x290 [ 564.698901] vfs_write+0x18f/0x510 [ 564.698917] SyS_write+0xef/0x220 [ 564.698924] ? security_file_ioctl+0x89/0xb0 [ 564.698936] ? SyS_read+0x220/0x220 [ 564.698948] ? do_fast_syscall_32+0x156/0xf9d [ 564.698962] ? SyS_read+0x220/0x220 [ 564.698972] do_fast_syscall_32+0x3ee/0xf9d [ 564.698982] ? do_raw_spin_trylock+0x190/0x190 [ 564.698997] ? do_int80_syscall_32+0x9d0/0x9d0 [ 564.699016] ? lockdep_sys_exit+0x47/0xf0 [ 564.699025] ? syscall_return_slowpath+0x2ad/0x550 [ 564.699035] ? prepare_exit_to_usermode+0x340/0x340 [ 564.699046] ? sysret32_from_system_call+0x5/0x3b [ 564.699063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.699083] entry_SYSENTER_compat+0x51/0x60 [ 564.699089] RIP: 0023:0xf7f0fc79 [ 564.699093] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 564.699102] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000020011fd2 [ 564.699106] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 564.699110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.699114] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.699118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.702906] FAULT_FLAG_ALLOW_RETRY missing 30 [ 564.702925] CPU: 0 PID: 17539 Comm: syz-executor3 Not tainted 4.15.0-rc1+ #114 [ 564.702939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.702945] Call Trace: [ 564.702964] dump_stack+0x194/0x257 [ 564.702981] ? arch_local_irq_restore+0x53/0x53 [ 564.702999] ? handle_userfault+0x12b7/0x24c0 [ 564.703020] handle_userfault+0x12fa/0x24c0 [ 564.703031] ? handle_userfault+0x150b/0x24c0 [ 564.703062] ? userfaultfd_ioctl+0x4520/0x4520 [ 564.703081] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 564.703096] ? check_noncircular+0x20/0x20 [ 564.703118] ? print_usage_bug+0x3f0/0x3f0 [ 564.703130] ? print_usage_bug+0x3f0/0x3f0 [ 564.703144] ? switched_to_fair+0xb0/0xb0 [ 564.703152] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.703166] ? trace_hardirqs_on+0xd/0x10 [ 564.703176] ? get_user_pages_fast+0x14e/0x340 [ 564.703197] ? check_noncircular+0x20/0x20 [ 564.703213] ? __lock_acquire+0x6e9/0x47f0 [ 564.703222] ? __lock_acquire+0x6e9/0x47f0 [ 564.703232] ? lock_downgrade+0x980/0x980 [ 564.703244] ? lock_acquire+0x1d5/0x580 [ 564.703265] ? find_held_lock+0x39/0x1d0 [ 564.703291] ? lock_downgrade+0x980/0x980 [ 564.703302] ? __handle_mm_fault+0x2698/0x3e20 [ 564.703315] ? finish_task_switch+0x1d3/0x740 [ 564.703327] ? lock_release+0xda0/0xda0 [ 564.703350] ? do_raw_spin_trylock+0x190/0x190 [ 564.703360] ? userfaultfd_ctx_put+0x740/0x740 [ 564.703385] __handle_mm_fault+0x353a/0x3e20 [ 564.703392] ? check_noncircular+0x20/0x20 [ 564.703409] ? __pmd_alloc+0x4e0/0x4e0 [ 564.703419] ? find_held_lock+0x39/0x1d0 [ 564.703445] ? lock_downgrade+0x980/0x980 [ 564.703455] ? __lock_is_held+0xbc/0x140 [ 564.703513] handle_mm_fault+0x334/0x8d0 [ 564.703525] ? down_read+0x96/0x150 [ 564.703539] ? __handle_mm_fault+0x3e20/0x3e20 [ 564.703548] ? vmacache_find+0x5f/0x280 [ 564.703565] ? find_vma+0x30/0x150 [ 564.703580] __do_page_fault+0x5c9/0xc90 [ 564.703602] ? mm_fault_error+0x2c0/0x2c0 [ 564.703629] do_page_fault+0xee/0x720 [ 564.703641] ? __do_page_fault+0xc90/0xc90 [ 564.703653] ? lock_release+0xda0/0xda0 [ 564.703671] ? do_raw_spin_trylock+0x190/0x190 [ 564.703687] ? inode_dio_wait+0x530/0x530 [ 564.703701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.703722] page_fault+0x22/0x30 [ 564.703732] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 564.703736] RSP: 0018:ffff8801c1e9f790 EFLAGS: 00010246 [ 564.703743] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 564.703748] RDX: 000000000000010e RSI: ffffc90002cc8000 RDI: ffff8801c1e9fb90 [ 564.703753] RBP: ffff8801c1e9f870 R08: 1ffffffff0d30b63 R09: 1ffff100383d3eac [ 564.703757] R10: ffff8801c17ba380 R11: 0000000000000003 R12: 1ffff100383d3ef5 [ 564.703762] R13: ffff8801c1e9f848 R14: 0000000000000000 R15: ffff8801c1e9fb88 [ 564.703784] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 564.703808] ? iov_iter_revert+0x9d0/0x9d0 [ 564.703824] ? mark_held_locks+0xb2/0x100 [ 564.703831] ? simple_xattr_get+0xeb/0x160 [ 564.703841] ? current_kernel_time64+0x122/0x2f0 [ 564.703854] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.703869] generic_perform_write+0x200/0x600 [ 564.703902] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 564.703909] ? generic_update_time+0x1b2/0x270 [ 564.703920] ? __mnt_drop_write_file+0xd/0x70 [ 564.703929] ? file_update_time+0xbf/0x470 [ 564.703942] ? current_time+0xc0/0xc0 [ 564.703960] ? down_write+0x87/0x120 [ 564.703977] __generic_file_write_iter+0x366/0x5b0 [ 564.703983] ? retint_kernel+0x10/0x10 [ 564.704002] generic_file_write_iter+0x399/0x7a0 [ 564.704020] ? __generic_file_write_iter+0x5b0/0x5b0 [ 564.704035] ? iov_iter_init+0xaf/0x1d0 [ 564.704050] __vfs_write+0x68a/0x970 [ 564.704065] ? kernel_read+0x120/0x120 [ 564.704108] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 564.704117] ? __sb_start_write+0x203/0x290 [ 564.704132] vfs_write+0x18f/0x510 [ 564.704148] SyS_write+0xef/0x220 [ 564.704156] ? security_file_ioctl+0x89/0xb0 [ 564.704168] ? SyS_read+0x220/0x220 [ 564.704180] ? do_fast_syscall_32+0x156/0xf9d [ 564.704194] ? SyS_read+0x220/0x220 [ 564.704204] do_fast_syscall_32+0x3ee/0xf9d [ 564.704214] ? do_raw_spin_trylock+0x190/0x190 [ 564.704231] ? do_int80_syscall_32+0x9d0/0x9d0 [ 564.704249] ? lockdep_sys_exit+0x47/0xf0 [ 564.704259] ? syscall_return_slowpath+0x2ad/0x550 [ 564.704269] ? prepare_exit_to_usermode+0x340/0x340 [ 564.704280] ? sysret32_from_system_call+0x5/0x3b [ 564.704298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.704317] entry_SYSENTER_compat+0x51/0x60 [ 564.704323] RIP: 0023:0xf7f88c79 [ 564.704328] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 564.704347] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020011fd2 [ 564.704351] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 564.704355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.704360] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.704364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.740131] FAULT_FLAG_ALLOW_RETRY missing 30 [ 564.740141] CPU: 0 PID: 17538 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 564.740146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.740149] Call Trace: [ 564.740160] dump_stack+0x194/0x257 [ 564.740175] ? arch_local_irq_restore+0x53/0x53 [ 564.740193] ? handle_userfault+0x12b7/0x24c0 [ 564.740210] handle_userfault+0x12fa/0x24c0 [ 564.740219] ? handle_userfault+0x150b/0x24c0 [ 564.740246] ? userfaultfd_ioctl+0x4520/0x4520 [ 564.740264] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 564.740274] ? check_noncircular+0x20/0x20 [ 564.740288] ? set_next_entity+0x2ed/0xd70 [ 564.740298] ? print_usage_bug+0x3f0/0x3f0 [ 564.740308] ? print_usage_bug+0x3f0/0x3f0 [ 564.740316] ? switched_to_fair+0xb0/0xb0 [ 564.740323] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.740338] ? trace_hardirqs_on+0xd/0x10 [ 564.740348] ? get_user_pages_fast+0x14e/0x340 [ 564.740368] ? check_noncircular+0x20/0x20 [ 564.740383] ? __lock_acquire+0x6e9/0x47f0 [ 564.740392] ? __lock_acquire+0x6e9/0x47f0 [ 564.740401] ? lock_downgrade+0x980/0x980 [ 564.740415] ? lock_acquire+0x1d5/0x580 [ 564.740437] ? find_held_lock+0x39/0x1d0 [ 564.740463] ? lock_downgrade+0x980/0x980 [ 564.740474] ? __handle_mm_fault+0x2698/0x3e20 [ 564.740489] ? finish_task_switch+0x1d3/0x740 [ 564.740502] ? lock_release+0xda0/0xda0 [ 564.740520] ? do_raw_spin_trylock+0x190/0x190 [ 564.740532] ? userfaultfd_ctx_put+0x740/0x740 [ 564.740559] __handle_mm_fault+0x353a/0x3e20 [ 564.740566] ? check_noncircular+0x20/0x20 [ 564.740582] ? __pmd_alloc+0x4e0/0x4e0 [ 564.740592] ? find_held_lock+0x39/0x1d0 [ 564.740618] ? lock_downgrade+0x980/0x980 [ 564.740627] ? __lock_is_held+0xbc/0x140 [ 564.740680] handle_mm_fault+0x334/0x8d0 [ 564.740688] ? down_read+0x96/0x150 [ 564.740698] ? __handle_mm_fault+0x3e20/0x3e20 [ 564.740705] ? vmacache_find+0x5f/0x280 [ 564.740720] ? find_vma+0x30/0x150 [ 564.740735] __do_page_fault+0x5c9/0xc90 [ 564.740756] ? mm_fault_error+0x2c0/0x2c0 [ 564.740785] do_page_fault+0xee/0x720 [ 564.740798] ? __do_page_fault+0xc90/0xc90 [ 564.740810] ? lock_release+0xda0/0xda0 [ 564.740828] ? do_raw_spin_trylock+0x190/0x190 [ 564.740845] ? inode_dio_wait+0x530/0x530 [ 564.740859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.740880] page_fault+0x22/0x30 [ 564.740889] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 564.740893] RSP: 0018:ffff8801d0327790 EFLAGS: 00010246 [ 564.740900] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff82507361 [ 564.740904] RDX: 000000000000010e RSI: ffffc90001fae000 RDI: ffff8801d0327b90 [ 564.740909] RBP: ffff8801d0327870 R08: 1ffffffff0d30b63 R09: 1ffff1003a064eac [ 564.740913] R10: ffff8801d86a4040 R11: 0000000000000003 R12: 1ffff1003a064ef5 [ 564.740918] R13: ffff8801d0327848 R14: 0000000000000000 R15: ffff8801d0327b88 [ 564.740940] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 564.740963] ? iov_iter_revert+0x9d0/0x9d0 [ 564.740978] ? mark_held_locks+0xb2/0x100 [ 564.740985] ? simple_xattr_get+0xeb/0x160 [ 564.740995] ? current_kernel_time64+0x122/0x2f0 [ 564.741008] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 564.741023] generic_perform_write+0x200/0x600 [ 564.741055] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 564.741062] ? generic_update_time+0x1b2/0x270 [ 564.741073] ? __mnt_drop_write_file+0xd/0x70 [ 564.741081] ? file_update_time+0xbf/0x470 [ 564.741095] ? current_time+0xc0/0xc0 [ 564.741113] ? down_write+0x87/0x120 [ 564.741130] __generic_file_write_iter+0x366/0x5b0 [ 564.741138] ? check_noncircular+0x20/0x20 [ 564.741156] generic_file_write_iter+0x399/0x7a0 [ 564.741174] ? __generic_file_write_iter+0x5b0/0x5b0 [ 564.741189] ? iov_iter_init+0xaf/0x1d0 [ 564.741205] __vfs_write+0x68a/0x970 [ 564.741219] ? kernel_read+0x120/0x120 [ 564.741263] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 564.741272] ? __sb_start_write+0x203/0x290 [ 564.741287] vfs_write+0x18f/0x510 [ 564.741303] SyS_write+0xef/0x220 [ 564.741310] ? security_file_ioctl+0x89/0xb0 [ 564.741322] ? SyS_read+0x220/0x220 [ 564.741339] ? do_fast_syscall_32+0x156/0xf9d [ 564.741352] ? SyS_read+0x220/0x220 [ 564.741363] do_fast_syscall_32+0x3ee/0xf9d [ 564.741373] ? do_raw_spin_trylock+0x190/0x190 [ 564.741388] ? do_int80_syscall_32+0x9d0/0x9d0 [ 564.741407] ? lockdep_sys_exit+0x47/0xf0 [ 564.741416] ? syscall_return_slowpath+0x2ad/0x550 [ 564.741426] ? prepare_exit_to_usermode+0x340/0x340 [ 564.741437] ? sysret32_from_system_call+0x5/0x3b [ 564.741455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.741474] entry_SYSENTER_compat+0x51/0x60 [ 564.741480] RIP: 0023:0xf7f0fc79 [ 564.741484] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00002cd000)="2f6465762f76637300", 0x434000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000194000-0x10)={0x1, 0x1ff}) clock_nanosleep(0x4, 0x0, &(0x7f0000349000)={0x0, 0x0}, &(0x7f000005d000-0x8)={0x0, 0x0}) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00009b3000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) inotify_init1(0x800) r0 = socket$bt_l2cap(0x1f, 0x7, 0x0) chmod(&(0x7f0000011000)="2e2f66696c653000", 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000773000-0xc)={0x5, 0x9, 0x9, 0x3, 0xb3, 0xc8a, 0x101}, 0xc) time(&(0x7f0000db1000-0x4)=0x0) mlockall(0x4) 2017/12/02 09:13:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) poll(&(0x7f0000c53000-0x10)=[{r2, 0x4000, 0x0}, {r2, 0xa020, 0x0}], 0x2, 0x1) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000a72000)="2f6465762f7573626d6f6e2300", 0x8000, 0x191003) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000248000-0x8)={0x0, 0x0}) dup(r0) 2017/12/02 09:13:53 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000b83000-0xf)="2f6465762f73657175656e63657200", 0x80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001000-0x4)=0x7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:53 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) [ 564.741492] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000020011fd2 [ 564.741496] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 564.741500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.741504] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.741508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000381000)=@in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00004ac000-0x8)="2e2f66696c653000", 0x101000, 0x25) sendmmsg$nfc_llcp(r0, &(0x7f00004d8000-0x14)=[{&(0x7f0000b76000-0x58)={0x27, 0xf63e, 0x6, 0x5, 0x100000001, 0x1, "45e9a740df3e4126f68eb2f94f11e71b27d898e38ae860879580b9889edb931612dc9a613aa38da3feb44aec8cf58aa2cf88cbfc98973d0dab3f007d9fa825", 0xcc}, 0x58, &(0x7f000001f000)=[{&(0x7f00004aa000)="9306af1b127a892f0720f6bc16d3b22a7b0c61c1fa3697fc0a65f268b4cd83129c42c852804b9a983e213b505bb844df48264b3564571d192439a4e82748027a3513c4d76ed6b4765b034da7c0d506cd954972f9ca0fc82d54e01ee91050abde53d7b8a4a78c00e4dd77ea7a927495681f62b8fdd721cac5d3488a6f998ee4b9f54635dc55e8e81f99d6d798587f63dc4dfd1c76da991875935994ee54b35ba0a7c9972f35f1bdaa8e37853dd5ad7e092f6666f910bf7be8d0f40a5b69aa4c70ab19e3516beb0dfae499a1166d298e6fb6c2", 0xd2}, {&(0x7f0000cf2000-0x97)="b0a9e1dba502c9c2229ee839f11cddc4f44b9416a68f5b25219ee106094db523c4b005afee64bc55f0940b34c74d4cf97dd3a606946ba706944f04a3e468d1169d330774d129faba1582625f298e2080e6b6d649020c256b349d40170f837c159962571a22313269a13ddfedcee8cd68bac305c5535d733eb2604c2f087c92db069d731a5f4179e87dd878c4edc05ab1f1463e7ca21cab", 0x97}, {&(0x7f00001a3000)="47b53109bec71d9022844e124966d4f2edb60d2db0f8b560a65dfeccc6c2f56a2e43e300b9a82bf414699d7b0d04ce", 0x2f}], 0x3, &(0x7f0000acd000-0x74)={0x74, 0x84, 0x800, "ebc3a17e473775836fa70d38771004c3272346ee2306d98daf9623e05e9b35d81fd14d0b6e5a48d6be7430f76216989d0a64f82c10cd5b50b0320c2a24e1999b71fb5590d2bec6918b498e82cca77c2745451bf6e49dad74c60207f75d83970c36f33a5c12e82d8a"}, 0x74, 0x800}], 0x1, 0x80) mlockall(0x4) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) r0 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000056c000-0x78)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000dbd000-0x8)={0x0, 0x0}) pipe2(&(0x7f0000246000)={0x0, 0x0}, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000bbf000)={0x0, 0x0, 0x30}, &(0x7f00008d8000)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000876000-0x18)={r3, 0xfffffffffffffffb, 0x20, 0x1, 0x80000000}, &(0x7f0000651000)=0x18) mlockall(0x4) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000881000)=0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000e4f000-0x4)=0x0, &(0x7f0000d58000-0x4)=0x4) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000145000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000dd1000)={r3, 0xd}, 0x8) unshare(0x2000000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000baf000-0x4)=0x8, 0x4) [ 566.629811] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 566.629811] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:53 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000-0x34)={{0x200000000003, 0x1, 0x80000000000ff, 0x2, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) read(r1, &(0x7f0000226000)="0000000000000000000000000000000000000000", 0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:53 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000763000)="2f6465762f72746300", 0x40000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001000-0x8)=0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$unix(r0, &(0x7f0000001000-0x25)=@file={0x0, "0000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000001000)=0x25) getsockopt$inet_int(r0, 0x0, 0x3a, &(0x7f0000000000)=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f000011a000-0x8)={0xa, &(0x7f0000683000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00008b6000)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000d18000)={0x100000000, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0xdd9c, 0x7de19cf3, 0x7fff, 0x35, 0x3, 0x5fd1}, 0xb) mlockall(0x4) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f0000ce6000-0x8)="2e2f66696c653000", &(0x7f00007ee000)=[&(0x7f0000b67000)="47504c00", &(0x7f0000d40000)="6367726f7570656d3073656c696e7578295d6d696d655f7479706500", &(0x7f00000de000)="2d6c6f00", &(0x7f00003c6000)="656d305d7b7573657273656c696e75787a2800", &(0x7f0000c28000-0x1c)="747275737465642e62646576707070312a6d696d655f747970652100"], &(0x7f00006dc000)=[]) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:53 executing program 3: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x80000, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) wait4(0xffffffffffffffff, &(0x7f0000d74000)=0x0, 0x0, &(0x7f0000ef8000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) [ 566.682241] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 566.682241] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000409000)="2f6465762f6175746f667300", 0x101000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000524000)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000447000)=0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000e19000-0x24)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x5, [@remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, @remote={0xac, 0x14, 0x0, 0xbb}, @loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}]}, 0x24) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00005da000-0x8)={0x1, r1}) mlockall(0x4) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000ccb000)="bff548304c608c5b3dd2bf8885a3f1d1a4ad8ae48c0935a2de8893c8cc234ea2d5a9be6fc9958c281e8c897dbaff9c76e8fe0d8c28630e8c25b76c06342aa5343b48ef680068b6adadc82c056bcbe026a6d4d3fb96067b84ca200a5df5f1de89d17d33e5fea8e56f48e39cc510ebebca606423a0776f1c", 0x77) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r1 = dup(r0) r2 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000019f000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000cc0000)=0xe8) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000d74000)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00002f7000)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000f59000)={{{@in=@empty=0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f4a000-0x4)=0xe8) r7 = getgid() sendmsg$unix(r1, &(0x7f00009df000)={&(0x7f00001b6000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa, &(0x7f0000ec7000-0x20)=[{&(0x7f000019b000-0xbb)="a44a88f126cc4b0b4d24291775ee6c6f1e6111e1afec81148811dd9985360e906fcef2cccb7974e3b707fc6fa61f2b5980f36ee17ac15f478076355c4f1973da58132880ef0a2ddfc6eb463d5b756cc0376d0b2371506e1d04ed60d6160872f57952d55f80f6f3f50615be08d385d0735406cb08ba7816e1bc2f05fd0008941202cf5009f0f2c985bf1a68c18134c89247076b910cd8c7d561709744c5264870c90068f06cf0e83f89f9148abb1d737f65497b2597315459d92efe", 0xbb}, {&(0x7f0000927000-0x9c)="270ce4a2133b3699ac217b30e076acbaa7c672138034bc47d4f04273d932c2be997ed5826e4861ef6190bcf35bd4e8623a46f69eb7ca5b65f8babc6a74438a4814e197438b27f2819a074f25bd2b9522213667088d3283011f827463b4ce3de4b786db6ae5bd42da95cd54d42e79a8502c3bcb9eef5db5d614dfd2dd63fa3fa6b52586f5576ecb17b3fcdc40855e9e79f61aa6889a911f5a5e185302", 0x9c}, {&(0x7f0000353000)="4769874a1bd0e8cb58da99d75ecda0176b3be615de5ca5b8d1bf82bb3d0e41dd085491426ccc0bd0b9cc96ead2304c4ecb457bf54f4507369f1d0fd5c61c3aa28a2b0e7d85d5a9f32c9bdca0746f3e985e4c70d8a2a0b483d73324ff7314a64cbb48e8bf37e617511116ebebc0c6cd736d70fe500df52131c46c018524379f33cfa7b65ebc4f10a0149016aedb812d621462aa8dd5ea6c1b8f586a43d2f6ee63a9042adc82c76b2ce5619eb08c7ab1144a4ef138ef1e8606d2304b6400681db83ce28d57538d5e157453ed864b71c9b62fc0d92da1dea0a6b93f9e8edecbf1a3abe7f9110b41e60d38e3a08b409f7ed931a8db5f6c", 0xf5}, {&(0x7f0000313000-0x3d)="774003e901e84073d3a6df4483768e416f650a72dd9ea433ea9cd22dad82518fe929472dbf6de3e5afcacde659155ff0ebdb3b307d2257c9b3d8c3e201", 0x3d}], 0x4, &(0x7f0000554000-0xa0)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}], 0xa0, 0x800}, 0x20000000) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000004e000)={0x2, 0x78, 0x3e3, 0x0, 0x800, 0x20000000, 0x0, 0x0, 0x0, 0x8, 0x40000000000000fe, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x20000000000002, 0x0, 0x0, 0x0, 0x2000000, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000098000)=0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000ea6000)="2f6465762f6877726e6700", 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000440000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) mlockall(0x4) 2017/12/02 09:13:53 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f6b766d00", 0x44043, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000917000/0x1000)=nil, 0x1000}, 0x1, 0x0}) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2000004) [ 566.750520] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 566.750520] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000e29000)="2f6465762f70746d7800", 0x40000, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f000041e000-0x2)={0x6, 0xff}) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000994000)="2f6465762f7573626d6f6e2300", 0x2, 0x400000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000f0b000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000401000-0xc)={r1, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000b1f000-0x8)={r2, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) pipe(&(0x7f0000a40000-0x8)={0x0, 0x0}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f000000a000)="c8f15547a93aba8fab6c751e68763557d6728539ee0b08ee6795c988537bf74c4debbe43ebf44c1fac21a241c9b84c499dec7f1b5e892f1609d24f1197f5c3a739dfbf8da80974a88bc90714bd697cfc7f072752faa39419bf6e7dec213535a249135506a321a6c71f98614070f6e32274d9df2109747ff46eed08c3cf30ed1e55e8118e914c004601c4d39e97a7fed498a70f4873ebf5c535061a45d7df609c46db4a9a71") gettid() 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000e93000-0x14)={0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x6}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) pselect6(0x40, &(0x7f0000cb2000-0x40)={0xfffffffffffffc00, 0xfffffffffffff000, 0x3, 0x6, 0x7, 0x0, 0x4, 0x741}, &(0x7f0000d96000-0x40)={0x6, 0x3, 0x400, 0x5, 0x3, 0x1f, 0x6, 0x8000}, &(0x7f0000190000-0x40)={0x1000, 0x9, 0x17a2, 0xffff, 0x9, 0x1, 0x2, 0x0}, &(0x7f000082c000)={0x0, 0x989680}, &(0x7f000085a000-0x8)={&(0x7f0000838000)={0x81}, 0x8}) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000386000)=0x3) get_thread_area(&(0x7f0000dd8000-0x10)={0x100, 0xffffffff, 0x1000, 0x2, 0x0, 0x1, 0xd9, 0x4, 0x0, 0xffffffffffffff7d}) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 566.813810] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 566.813810] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r1 = userfaultfd(0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000a57000)={0x6, r0, 0x0}) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = syz_open_dev$mouse(&(0x7f0000bed000)="2f6465762f696e7075742f6d6f7573652300", 0x7, 0x414800) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f000076f000)={0x2, 0x10d000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000066d000-0x108)={0x0, @in6={{0xa, 0x1, 0x9, @loopback={0x0, 0x1}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x10001, 0x20004000, 0x9, 0x0, 0x2, 0x1ff, 0xfffffffffffff800, 0x2, 0x1, 0x4, 0x400, 0x7, 0x8, 0x7ff, 0x8]}, &(0x7f0000357000-0x4)=0x108) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000314000)={r1, 0x80000000, 0x5b3a, 0x1}, 0x10) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 2: r0 = accept4$inet(0xffffffffffffff9c, &(0x7f00000b2000)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000b62000-0x4)=0x10, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001000-0x20)={@generic="fdb55d99df30be72b3dfea4c172812c2", @ifru_addrs={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000dc000-0x4)=0x100000001, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00009d8000)="2f6465762f6877726e6700", 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000dc0000-0x8)={0x4, 0x101, 0x0, 0x1446, 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x10) write(r1, &(0x7f0000b96000)="240000001d00252f120000000000005b061c9a1300b492060000000000030005e10004d3e9", 0x25) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000a94000-0x8)={0x1000, &(0x7f0000d3d000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = userfaultfd(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 3: r0 = perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000001000-0x98)={0x0, @in6={{0xa, 0x0, 0x47, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x6}, &(0x7f00007af000-0x4)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x6d7}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000f85000)={0x0, 0x7fff}, &(0x7f0000001000-0x1)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000c89000-0x10)={0x0, 0x6, 0xa9f, 0x2}, &(0x7f0000001000-0x3)=0x10) r6 = dup(r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={r5, 0x8, 0x30}, &(0x7f0000002000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000e3000)={0x0, 0x3, 0x200, 0x101, 0x100, 0x6}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000001000-0xc)={0x0, 0x8000, 0x10}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001000-0x1c)=[{&(0x7f0000851000)=@in6={0xa, 0x0, 0x401, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x40}, 0x1c, &(0x7f000027f000-0x10)=[{&(0x7f0000001000-0x1000)="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", 0x1000}, {&(0x7f00006f3000)="d53ce8cbc6ec3d86b68a4b8a9f78ed5e1e3b18601af6fc43302eeb146db8a3e9e4bc21c51cdd41b8e1ed87f0879837e33779", 0x32}], 0x2, &(0x7f0000000000)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x6, 0x9, 0x6, r2}}, @init={0x14, 0x84, 0x0, {0x9, 0x970, 0x0, 0x2}}, @init={0x14, 0x84, 0x0, {0x60, 0x9, 0x2c24478e, 0x7}}, @sndrcv={0x2c, 0x84, 0x1, {0x1, 0x7a8f695f, 0x200, 0x3, 0x81, 0x480000, 0x6, 0x7f, r3}}, @sndrcv={0x2c, 0x84, 0x1, {0xaf0c, 0x0, 0x8000, 0x9, 0x0, 0x1, 0x5, 0x9, r4}}, @sndrcv={0x2c, 0x84, 0x1, {0x8, 0x6, 0x800f, 0x6, 0x7, 0x8, 0xfffffffffffffffe, 0x1, r5}}, @sndrcv={0x2c, 0x84, 0x1, {0x3, 0x8000, 0x8, 0xb47a, 0x7f, 0xbae2, 0x4, 0x3, r7}}, @sndinfo={0x1c, 0x84, 0x2, {0x8001, 0x6, 0x7ff, 0x300000000, r8}}], 0x160, 0x20000000}], 0x1, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000fd1000-0x20)={0x3, 0x4, 0xc, 0x8, 0x1000, 0x800, 0x0, 0x8, r7}, 0x20) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f000096a000)={0xac, 0xa7570ee, 0xb, 0x7ac, 0x7, 0x8, 0x4, 0x0, r4}, 0x20) ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000350000-0xf)="2f6465762f73657175656e63657200", 0x802, 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) 2017/12/02 09:13:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x5, &(0x7f00008e8000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x49) r0 = syz_open_dev$mice(&(0x7f000098f000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x80080) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000bfc000-0x30)={0x8, 0x118, &(0x7f00006c7000+0xee)="4a92ad7f81563ff76c1f8d4804bb83bc835d3e7ff959813efa1c66a89df7fccd7c9560b14a1b0ffa41da37b5362c96f02ca293ce5b8cf0bb563c7390ce9d9f386a05e8808810585ac7fb5740ef4bada01f1f75d72bf7e88de57c0411b3609716e8ba61f691539fcf4bfca73ce1bcdece03793bad2aa671256f1a1828cf1a2062e9db277d40caa84ee2ebf94acf20ba24deb15276c0eaf17d6458b2370bf3fd424e76056603d5dd95f075b18405e558c07dfc0dc144ec76fd97d47e7162a1700187a777715751435ae3f928a2269a12eea31ed8645bba8825c313d4009ac862819f0ad59b667fec80100ad44089b02b394477aa83e2", &(0x7f0000c09000)="010054bfb6924e11fc0124998b51f4f75d9b8c45c4b63f0f6a1374444c9d6a4714074462d9596499bf6994dc7914197fdba040a9828331b254b0a85a08ccf9055313e9e3ba477bd847b73a19249821778b0c16b54c390a3690b5204c1c42007aa9da580c943edd4d604fbe006bb6f21cbc", 0xf5, 0x71, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) seccomp(0x4, 0x1, &(0x7f0000e21000-0x8)={0x0, &(0x7f000074b000)=[]}) gettid() 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00001a9000)={0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000632000-0x6)={0xf8, 0x69c}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000ede000)={{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="726f7365300000000000000000000000"}) mlockall(0x4) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r1 = dup3(r0, r0, 0x0) sigaltstack(&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000eee000-0x4)=0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000087d000-0x10)={0x3f, 0x8}) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) userfaultfd(0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) ioctl$TIOCCONS(r0, 0x541d) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00001cf000-0x11)="2f6465762f7161745f6164665f63746c00", 0x8000, 0x0) ioctl$KVM_NMI(r0, 0xae9a) mlockall(0x4) [ 566.962927] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 566.962927] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 3: r0 = perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000e22000-0x18)={0x4, 0xfffffffffffffffd, 0x8001, 0x0, 0x6, 0x2}) r3 = openat(r1, &(0x7f0000f7d000)="2e2f66696c653000", 0x100, 0xa) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000f4c000-0x8)={0x0, 0x81}, &(0x7f000004f000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000ee4000-0x8)={r4, 0x7}, &(0x7f0000b48000)=0x8) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) r5 = creat(&(0x7f00006ea000-0x8)="2e2f66696c653000", 0x5) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000bef000)=0x3) 2017/12/02 09:13:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000084c000)="2f6465762f7573626d6f6e2300", 0x3, 0x800) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000af000-0x20)={@common="69703667726530000000000000000000", @ifru_addrs={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) recvfrom(r0, &(0x7f0000d93000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa9, 0x2000, &(0x7f0000917000)=@un=@abs={0x1, 0x0, 0x1}, 0x8) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000cf1000-0x4)=0x1, 0x4) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000cf7000-0x10)={r0, 0x28, &(0x7f00004dd000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f000098c000-0x1)=0xfffffffffffffffe, 0x1) 2017/12/02 09:13:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000d2d000)=0xfffffffffffff95f) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() ioctl$TIOCGSID(r0, 0x540f, &(0x7f000036b000)=0x0) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f00003fb000)=0x3277747) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f0000b8a000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x1000000, 0x0}}], {{0x0, @llc={0xf9, @snap={0xaa, 0xaa, "c0", "ead54e", 0xfbf7, "08b3ba9bc715a73a8a5453031960a26bf96965762256effa21c6b93de04ecb24608e9017d8d89c5f46da135771ddc3e76509aafc025de815593a3dbb3f101f207db3bbcb832de7e2b73a1a88757b835064b8c559af0d9fa03c9f06258dd4fef9a73c4cc06c202a7c779e5684fa3ed78559db33fbc560844aa1fe2841601689acb4282e7bf7a42567b78a4ac898e76c9a4569839011a578c26621caee2aef0a2714507442e039d9a6c4c93f91bed3ef0a6feb0c9aa71c613d85396e4ebcc48a6e414c05251824d38be6d7fbd654fe340ab63ebb1f07f19ad4b37e6d8a0fb380469be5ff22d59d92cdd5e10de779d7b03dd0"}}}}}}, 0x117) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000c73000-0x8)={0x0, 0x0}) fgetxattr(r0, &(0x7f000039a000-0x15)=@known="73797374656d2e736f636b70726f746f6e616d6500", &(0x7f0000fa4000-0x4f)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4f) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00005a7000)={@common="697036746e6c30000000000000000000", @ifru_flags=0x1}) mlockall(0x4) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000fd8000)={@common="79616d30000000000000000000000000", @ifru_flags=0x600}) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000b6a000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) r1 = perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00007e1000-0x9)="2f6465762f76637300", 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f000013e000-0xb8)={0x0, 0x20c0, 0x4, 0x9, 0x0, 0x0, 0x4, 0x62e3, {0x0, @in6={{0xa, 0x2, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0xfffffffffffffff7, 0x401, 0xfff, 0x6}}, &(0x7f000034f000-0x4)=0xb8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f000034b000)=@assoc_id=r3, 0x4) r4 = userfaultfd(0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000b32000)="") ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r5 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r5, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) userfaultfd(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000b1a000-0xa)="2f6465762f6375736500", 0x200000, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = syz_open_dev$mice(&(0x7f0000adc000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x10000) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000061000)={0x8, 0x0, [{0xc000000f, 0x3f, 0x1, 0x1, 0xfffffffffffffffa, 0x8f03, 0x8001, [0x0, 0x0, 0x0]}, {0x1, 0x1000, 0x0, 0x5, 0x50f, 0x8001, 0x5, [0x0, 0x0, 0x0]}, {0xc0000007, 0xf74, 0x1, 0x8001, 0x5, 0x2, 0x2800, [0x0, 0x0, 0x0]}, {0x40000001, 0x7ff, 0x5, 0x3, 0xca8, 0x8, 0x7ff, [0x0, 0x0, 0x0]}, {0x0, 0x2, 0x7, 0x7, 0x0, 0x1, 0xffff, [0x0, 0x0, 0x0]}, {0xc0000007, 0x0, 0x6, 0x3, 0x2, 0x7f, 0x8, [0x0, 0x0, 0x0]}, {0xd, 0x7fffffff, 0x7, 0x10000, 0x7, 0x4, 0x2, [0x0, 0x0, 0x0]}, {0x80000001, 0x1, 0x4, 0x6, 0x0, 0x2, 0x1cd, [0x0, 0x0, 0x0]}]}) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) userfaultfd(0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00001a8000)=0x0, 0x4) fcntl$getown(r0, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) pause() pipe(&(0x7f0000c27000)={0x0, 0x0}) mmap$binder(&(0x7f0000a12000/0x3000)=nil, 0x3000, 0x1000005, 0x10, r2, 0x0) socketpair$inet(0x2, 0x6, 0x7, &(0x7f0000372000-0x8)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f0000491000-0xa8)={{0x2, 0x100000000}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xce3b9f589702eed9, 0x0, 0x586a, 0xffffffffffffffff, 0xb1, 0x6, 0x8, 0x0, 0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f000078e000)=0x0, &(0x7f0000afb000-0x4)=0x4) connect(r2, &(0x7f0000ebd000)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000d91000)="2f6465762f6b766d00", 0x87348aec329034d3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000f8000-0x1c)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000a39000)=0x1c, 0x800) getsockopt$sock_buf(r2, 0x1, 0x3f, &(0x7f000040c000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00000ba000)=0x93) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f000049a000)={[{0x1, 0x7fffffff, 0x0, 0xfffffffffffffffb, 0x9b, 0xffffffffffffffc0, 0x2, 0x7f, 0x19, 0x7fffffff, 0x7, 0x2, 0x0}, {0x5, 0x7, 0x0, 0x9, 0x51f, 0x7, 0x100000001, 0x1, 0x800000000000000, 0x0, 0x7, 0x3, 0x7}, {0x6, 0x520, 0x7, 0x10001, 0xe6a, 0x100000001, 0xff, 0x4, 0x1, 0x81, 0x1, 0x2, 0x0}], 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e16000-0x10)="2f6465762f73657175656e6365723200", 0x101000, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00003dd000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") gettid() 2017/12/02 09:13:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r0, &(0x7f0000d69000-0xa)={0xa, 0x9, "118e"}, 0x0) r1 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r2 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0xffff, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000b4e000-0x90)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) symlinkat(&(0x7f0000818000-0xa)="2e2f636f6e74726f6c00", r0, &(0x7f000030b000)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0086426, &(0x7f0000d93000-0x8)={0x8, &(0x7f000075b000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000faa000-0x8)={r4, 0x2}) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r3, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) read$eventfd(r3, &(0x7f00007a2000)=0x0, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7f) r5 = add_key$keyring(&(0x7f0000bef000)="6b657972696e6700", &(0x7f000035b000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key(&(0x7f0000025000)="6c6f676f6e00", &(0x7f0000ab0000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000829000-0x71)="b8f5692154b33ab68e1d69a9e4058e42aae3a8f2855ebaeab3c10317b4b2d06a03bd3b86eeda4e5aa1304e7c7fe2785781e39253e124d3205cd0333c7806780b6b5149f8a96fe47700041b3c7d01eacb0ee8668341192b6543039230d3526ad64abed2d36b1e5f876e83c502b5d6dcb08f", 0x71, 0xfffffffffffffffa) keyctl$unlink(0x9, r5, r6) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000a5a000-0x8)={0x0, 0x0}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000fa0000)="2f6465762f7161745f6164665f63746c00", 0x20000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f000083c000-0x4)=0x100000000, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00001e1000-0x8)={0x0, 0xfffffffffffffffb}, &(0x7f00006f5000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000150000)={0x7, 0x8000, 0x2, 0x8, r1}, 0x10) mlockall(0x2) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f6b766d00", 0x8000, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000a26000)="2f6465762f73672300", 0x3, 0x20080) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000e0a000-0x4)={0x9}, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:53 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) time(&(0x7f0000001000-0x4)=0x0) perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000e31000-0xc)={0x101ff, 0x0, &(0x7f000055d000/0x3000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000b0f000-0xc)="2f6465762f6175746f667300", 0x44000, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000237000-0x8)="2e2f66696c653000", 0x24) inotify_rm_watch(r0, r1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00009fd000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x6}) syz_open_dev$evdev(&(0x7f00004a6000-0x12)="2f6465762f696e7075742f6576656e742300", 0x401, 0x400000) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = signalfd(r2, &(0x7f0000c37000-0x8)={0x67}, 0x8) ioctl$KDADDIO(r3, 0x4b34, 0x938) mlockall(0x4) r4 = dup2(r2, r2) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000d6000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000358000-0x4)=0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00007b2000-0x2)=0x164, 0x2) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00003d6000)={0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00007fc000-0x10)={0x9, 0xffffffffffff0001, 0xfffffffffffffff7, 0x3}, 0x10) mlockall(0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000a6f000)="2f6465762f6877726e6700", 0x4000, 0x0) setsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f000038c000)=0x8, 0x4) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000b26000)=0x8, 0x2) 2017/12/02 09:13:53 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000fe0000)="2f6465762f7663732300", 0x4, 0x40000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000440000-0xc)={0x0, @loopback=0x0, @remote={0x0, 0x0, 0x0, 0x0}}, &(0x7f00004b9000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000fdb000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7, r2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f000037d000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000a65000-0xa)="2f6465762f6375736500", 0x80, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x64, &(0x7f00003c2000)=0x0, &(0x7f0000d03000-0x4)=0x4) ioctl$KDENABIO(r1, 0x4b36) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) socketpair$ax25(0x3, 0x7, 0xce, &(0x7f00000fc000)={0x0, 0x0}) r3 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r4 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000c46000)={@common="67726574617030000000000000000000", @ifru_flags=0x2}) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f000062e000-0xc)={0x0, 0x0, 0x0}, &(0x7f00007ff000)=0xc) 2017/12/02 09:13:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000e8b000-0xa)="2f6465762f6375736500", 0x800, 0x0) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000c57000)=0x401, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000fc0000)="2f6465762f6175746f667300", 0x40000, 0x0) sendmsg$nfc_llcp(r1, &(0x7f000091a000)={&(0x7f000071c000)={0x27, 0x1, 0x7, 0x4, 0x8, 0x0, "dacf9563f42b6de372218056a863ccba6076882140d96547bcfe665db54b143837cf9f49db661453ea1989cb930c648ed08282e1c7f2bf76bfc71e082d8474", 0x9}, 0x58, &(0x7f0000699000-0x20)=[{&(0x7f0000f16000)="1451389b", 0x4}, {&(0x7f0000804000)="ca5d39dd85e168ed01e4e96563bdf007c8cacdec899e5e0d72b6f57713c2f47a3a08c3234f825d12847bb1f2948c6725294d7d05ef9fc5a206447fba150daa11499352843d3f56daa84bbfc504ed7d5bfcd7f4797f0a683be9d2dc0e8d1f5382595c0ca70ddfaa2b7b8c633d98454f40bfa64d84a0f03470e5c0f817ee338687c91a273d750af80fc35b48cf5a754f5562a40aa65a2682496a054dee5e6dca3c3d1eec467754b025c36a9f61c191fa72e21787ba8552138c106e776db6283ebbdcf32eee462065410eaec61b5fa2", 0xce}, {&(0x7f0000051000)="6ede44ac5cc342c9360fafaef7a0637bc2ef80932f8b59334e163d16e2812bddea94ebc5cad3b102c275004c5e48914c6be4a7f6902068ede86827f00484eba9551f865c12c75af07da4410b515687ca38a27cbb1a5c7161a8bbc8357c1a27c3cd63e1b38bee0f6b56ad99f2df14385f6b3c6652c5d33179b9a6d47fae832bc1f4fddf939aa3ee39a58b14cdba436c5c80242ce50848a684a871b4bb8cfa80045223628657d9f4e5427a17fd784eaa7ec47b28d61607c4af888235d5cbf8625d1cc52ff91ff0d80ebf8cca80", 0xcc}, {&(0x7f0000cb6000-0xdc)="02a21211d7028d073e0be99159707a47eabd777d0b05f4236c15daa427923a078c54c7d3fd80e5399becaefdfe214097c0bbd2d2e6bf2fd70ff97c5a6c0770f2565e4c310aa7cc9b9acc004bd4dc078fe96418c48a75704166592f18a68ac2d78c1efae08289d5ddee34db1bf3ab8678d8c7191710771051b42388668da62c83bb67425a7825103c92dc78daf0a062314df667d4a428046e0c4998b7fffbefb58ddaa17baaf63defcac42a49125b84e4ea407ba4fe6e6097721ba24a0cbc0847d665cc947e8c549d627c1b96841059e51e833a58bf3e1e976b652ff6", 0xdc}], 0x4, 0x0, 0x0, 0x4000}, 0x20000000) gettid() 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r1 = open(&(0x7f000068f000+0x3ba)="2e2f66696c653000", 0x420040, 0xc7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000d02000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000c65000)=0xc) fcntl$setownex(r0, 0xf, &(0x7f000082c000-0x8)={0x0, r2}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00006cd000-0x8)={0x0, 0x0}) 2017/12/02 09:13:53 executing program 4: request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = creat(&(0x7f00009d8000-0x8)="2e2f66696c653000", 0x20) ioctl$TIOCSTI(r0, 0x5412, 0x7) 2017/12/02 09:13:53 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000abc000-0xa)="2f6465762f6375736500", 0x101200, 0x0) getsockopt$packet_buf(r0, 0x107, 0x17, &(0x7f00006ea000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000b13000-0x4)=0x79) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000d36000-0xc)={0x0, 0x0, 0x0}, 0xc) 2017/12/02 09:13:54 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000002000-0x16)={0x1, 0x3, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @random="67f664997f11"]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) syz_extract_tcp_res$synack(&(0x7f000099b000)={0x0, 0x0}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000420000-0x8)={0x0, 0x0}, 0x3, 0x0) write$tun(r0, &(0x7f00009f9000-0x2a5)=@pi={0x0, 0x81f3, @ipv6={0x0, 0x6, "d0cac9", 0x279, 0x8, 0x5, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, {[@routing={0x67, 0x6, 0x2, 0x7, 0x80000001, [@loopback={0x0, 0x1}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}]}, @dstopts={0x7f, 0x3d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0xc0, "14fe0a9d7db69d01b491dd53b447030eaa2a978ad1fb0364db139b27fa03e0907f2ffe96bfaf5e66586f4d4ccdd5b040d53ffab38f6dcb7327f0f005adc92bb03c389b80d6248224bd1bb16c510ed1e6a05bc3d391dd9e6e3cd18ccdc5cb1dfa83c837b4e9ab2542772bee28f55a22877397013a8936e7d8a8029282b2f828a9f627272b86ebfd226f4a3409c375223cc44bd18a8f368cb16ddb4fb519e7a261964158353ddc41445a2cbb12b5c3dc31bdcdb0c2942786fca4be4b08d0e031ae"}, {0x5, 0x4c, "a9cf64a16422261a4fb9c708b567ae15c0069a20e28c4f0da560f874ff252c7d1b453025fa64f477c90ea1696975a3e4769c423fcc5a8df151db2636839336fbfb5c1ea8172e1bec206a060e"}, {0xff, 0xad, "8edc38636be2280a45ce561dcf2c372b15a5885e8e5b89af0de3eb8c1258bddbf100fbbca2443c7d9f7f6edb39ab0377942267d12e377adbf579cae42dfce0ee11bc53e63cfcdd2301cc3a3e71e5a213b1e9fc6b291ad17e34239881de00051dbfe88f741a6b497297c23373d604adf8512f9497d0f723866435268da95cbd696047fd89909ade7a92b4e819ee9290ab9dd0ea42c87fbcb82adec14e8840953b82f9efe6802d6b885f52a2f863"}, {0xff, 0x1a, "c715fcf92a07cc392aa831b7afe7575c29d04e29af9fc4acc266"}, {0xff, 0x10, "5080fab2314a28df7abefb4c1f09e0fd"}]}], @tcp={{0x3, 0x2, r2, r3, 0x4, 0x0, 0x8, 0x42, 0x2, 0x0, 0x7, {[@mss={0x2, 0x4, 0x40000000}, @sack={0x5, 0x6, [0x6]}]}}, {"52fa55ae3bac031ec1557017fc0db54f6f45d9ac35ead5cfcf362178a1137c3c9142368578723068e6e18dbe"}}}}}, 0x2a5) r4 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f000014a000-0xf3)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:54 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000921000)="2f6465762f6375736500", 0x8000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000868000)={r2, 0x28, &(0x7f0000603000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:54 executing program 1 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x80) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) lremovexattr(&(0x7f0000d7c000)="2e2f66696c653000", &(0x7f0000e3b000-0x18)=@known="73797374656d2e706f7369785f61636c5f61636365737300") connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f000031e000-0x8)={0x0, 0x0}) r1 = socket(0x1f, 0x8000a, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00005bd000)={{{@in=@empty=0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f39000-0x4)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000366000-0x50)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfff, 0x0, 0x7, 0x500, 0x75707a61, 0x2000040, r2}) 2017/12/02 09:13:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r0 = request_key(&(0x7f000044c000-0xb)="6173796d6d657472696300", &(0x7f000008f000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00009c8000-0x5)="6574683100", 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000f99000-0x8)="6b657972696e6700", &(0x7f0000223000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f00003ee000)="", 0x0, r1) 2017/12/02 09:13:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) [ 567.401522] FAULT_INJECTION: forcing a failure. [ 567.401522] name failslab, interval 1, probability 0, space 0, times 0 [ 567.416398] CPU: 0 PID: 17848 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #114 [ 567.423790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.433154] Call Trace: [ 567.435746] dump_stack+0x194/0x257 [ 567.439393] ? arch_local_irq_restore+0x53/0x53 [ 567.444080] should_fail+0x8c0/0xa40 [ 567.447787] ? find_held_lock+0x39/0x1d0 [ 567.451829] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 567.456916] ? find_held_lock+0x39/0x1d0 [ 567.460963] ? lock_downgrade+0x980/0x980 [ 567.465100] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 567.470954] ? kernel_read+0x120/0x120 [ 567.474817] ? rcu_note_context_switch+0x710/0x710 [ 567.479728] should_failslab+0xec/0x120 [ 567.483677] __kmalloc_track_caller+0x5f/0x760 [ 567.488237] ? strncpy_from_user+0x430/0x430 [ 567.492613] ? mpi_resize+0x200/0x200 [ 567.496388] ? strndup_user+0x62/0xb0 [ 567.500164] memdup_user+0x2c/0x90 [ 567.503677] strndup_user+0x62/0xb0 [ 567.507282] SyS_request_key+0x8c/0x2a0 [ 567.511228] ? SyS_add_key+0x340/0x340 [ 567.515095] ? SyS_add_key+0x340/0x340 [ 567.518954] do_fast_syscall_32+0x3ee/0xf9d [ 567.523255] ? do_int80_syscall_32+0x9d0/0x9d0 [ 567.527817] ? lockdep_sys_exit+0x47/0xf0 [ 567.531937] ? syscall_return_slowpath+0x2ad/0x550 [ 567.536843] ? sysret32_from_system_call+0x5/0x3b [ 567.541663] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 567.546483] entry_SYSENTER_compat+0x51/0x60 2017/12/02 09:13:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000e21000)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f000007d000)=0x1c, 0x80800) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00006b4000-0xb8)={0x0, 0x6, 0x71, 0x0, 0x100, 0xffffffffffffff7f, 0x72, 0x9, {0x0, @in6={{0xa, 0x0, 0x9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100000000, 0x3, 0x2cffa109, 0x5, 0x80000000}}, &(0x7f0000308000-0x4)=0xb8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000770000)=@assoc_id=r1, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000d50000-0x8)={0x0, 0x0}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000684000-0x70)={0x3, {0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x240, 0x6, 0x40, 0x1f, 0x400, &(0x7f0000f7e000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x2, 0xfffffffffffff8ae}) getresgid(&(0x7f0000323000-0x4)=0x0, &(0x7f0000355000)=0x0, &(0x7f0000fbf000+0x13c)=0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000a00000)={r1, @in={{0x2, 0x0, @rand_addr=0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mlockall(0x4) 2017/12/02 09:13:54 executing program 3: r0 = perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x1}]}) gettid() pause() 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000399000)=0x0, &(0x7f000015c000)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000a59000)={0x0, 0x0}) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000852000-0x8)={0x0, 0x0}) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00007e1000-0x8)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000fba000)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:54 executing program 1 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) [ 567.550861] RIP: 0023:0xf7febc79 [ 567.554196] RSP: 002b:00000000f77e708c EFLAGS: 00000296 ORIG_RAX: 000000000000011f [ 567.561875] RAX: ffffffffffffffda RBX: 000000002002eff5 RCX: 000000002026fffb [ 567.569116] RDX: 0000000020661000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.576357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.583597] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 567.590837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 09:13:54 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2017/12/02 09:13:54 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006a1000)="2f6465762f73657175656e63657200", 0x42100, 0x0) connect$bt_l2cap(r1, &(0x7f0000aa8000-0xe)={0x1f, 0x2, {0x7, 0x3, 0x3f, 0x8, 0x4, 0x6}, 0x8, 0x2}, 0xe) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000ed0000)={&(0x7f0000d2d000/0x4000)=nil, 0x4000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:54 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000e9c000-0xa)="2f6465762f7663732300", 0x4000000000000000, 0x800) r1 = getpgid(0xffffffffffffffff) ioctl$TIOCSPGRP(r0, 0x540f, &(0x7f0000172000-0x4)=r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000516000)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x40000000015, 0x0, 0x0) r4 = open(&(0x7f000000d000-0x8)="2e2f66696c653000", 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000704000-0x8)={0xffffffffffffffff}, &(0x7f0000dd8000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000f74000)={0x0, 0x8000000}, 0x8) truncate(&(0x7f0000505000-0x8)="2e2f66696c653000", 0x0) r5 = inotify_init1(0x0) dup2(r5, r3) r6 = syz_open_pts(r4, 0x422000) ioctl$TCSETS(r6, 0x5402, &(0x7f0000553000)={0x4, 0x7fffffff, 0x4, 0xc949, 0x6, 0x1f0e, 0x7, 0x4, 0x3, 0x6, 0x1e50, 0xdb}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000a72000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00007a2000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000b7c000-0x4)=0x100000000002, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000014a000)={0x88, @tick=0x9d, 0x0, {0x1, 0x5}, 0x20, 0x2, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x2) syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r2 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f000036f000)=0x0, &(0x7f00001ed000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x800) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r0, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000580000/0x2000)=nil, 0x2000, 0x3, 0x100032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, r3, 0x100000000) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000fed000-0x4)=0x1000, 0x4) socket$inet_sctp(0x2, 0x8, 0x84) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r3, &(0x7f0000fed000-0x1c)={0xa, 0x1, 0x539, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfef3}, 0x1c) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000091d000/0x400000)=nil, 0x400000, 0x1, 0x32, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:54 executing program 4 (fault-call:1 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:54 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000079d000-0x9)="2f6465762f6b766d00", 0x200000000608, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000fb4000-0x28)=[{0x8, 0x7}, {0x3, 0x3f}, {0xf, 0xc900}, {0x8, 0xffffffff}, {0xa, 0xffff}], 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00006bd000-0x11)="2f6465762f7667615f6172626974657200", 0x8502, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000570000-0x1c)={&(0x7f00000d4000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f0000c1c000-0x18)=[{&(0x7f0000a1f000-0x1b)="06814b713a9612c80208d888429f30fbc53af53eb8255adc0c68a9", 0x1b}, {&(0x7f00000b6000)="42cb9e7c0dc6014b6bcd9c6f452193f471a7561b2ab262fb58e5395a0cfffbadf158c2ed526c1c515b33d55bc5e7bbf35cf01d16c68c2024d8d88552bb2831d87c25b9668aeea2482b34356174e9f4d83d8532a7808a10b396f161435fb27829ae223cf8df7d293ec6b85a773e81852f7f09e963a8eb187af4393bae57ba7c15745eefa0c938439e913412642c59d87a32ee8d8249462faa520f26e9c47092ed371f0d31b1df195d37782694f309c85721e0375f350f50d4c36c8f1217f4f791b7e3dfc92ea4a7fa847265f525bbf9545b651d35a80c26", 0xd7}, {&(0x7f0000979000-0x8e)="20fe3841889aa80711d6b482b5583fcc83dce43c6f359ee45e4ec17ab8781237da8e8873e7933da3402c76949aa1ba9059320f8a62d5a6ce5373a90a42e6740406304cdbf3859c6a557f40ffa5fda2de4495a82fdd845a7ccb51dc7e0e084bcdb1a83aacb2e7dc9910b7157466139746cd91a82e7c482cb1397a0b49ef391036e17818c1e162f96fc211a218ff65", 0x8e}], 0x3, 0x0, 0x0, 0x4000010}, 0x4000) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000d06000)=0x3, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000ace000)="2f6465762f73657175656e63657200", 0x80000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000b76000)={0x81, 0x0, 0xa4df, 0x0, 0x9}, 0x14) connect(r1, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 567.658649] FAULT_INJECTION: forcing a failure. [ 567.658649] name failslab, interval 1, probability 0, space 0, times 0 [ 567.675708] CPU: 1 PID: 17874 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #114 [ 567.683107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.693033] Call Trace: [ 567.695618] dump_stack+0x194/0x257 [ 567.699250] ? arch_local_irq_restore+0x53/0x53 [ 567.703915] ? __save_stack_trace+0x7e/0xd0 [ 567.705621] FAULT_INJECTION: forcing a failure. [ 567.705621] name failslab, interval 1, probability 0, space 0, times 0 [ 567.719392] should_fail+0x8c0/0xa40 [ 567.723085] ? check_noncircular+0x20/0x20 [ 567.727305] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 567.732386] ? kasan_kmalloc+0xad/0xe0 [ 567.736250] ? __kmalloc_track_caller+0x15e/0x760 [ 567.741070] ? memdup_user+0x2c/0x90 [ 567.744764] ? strndup_user+0x62/0xb0 [ 567.748540] ? SyS_request_key+0x8c/0x2a0 [ 567.752665] ? do_fast_syscall_32+0x3ee/0xf9d [ 567.757136] ? entry_SYSENTER_compat+0x51/0x60 [ 567.761702] ? find_held_lock+0x39/0x1d0 [ 567.765759] ? lock_downgrade+0x980/0x980 [ 567.769909] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 567.775779] ? rcu_note_context_switch+0x710/0x710 [ 567.780685] ? __check_object_size+0x25d/0x4f0 [ 567.785252] should_failslab+0xec/0x120 [ 567.789206] __kmalloc_track_caller+0x5f/0x760 [ 567.793775] ? strncpy_from_user+0x430/0x430 [ 567.798160] ? strndup_user+0x62/0xb0 [ 567.801940] ? _copy_from_user+0x99/0x110 [ 567.806072] memdup_user+0x2c/0x90 [ 567.809593] strndup_user+0x62/0xb0 [ 567.813203] SyS_request_key+0xbb/0x2a0 [ 567.817157] ? SyS_add_key+0x340/0x340 [ 567.821035] ? SyS_add_key+0x340/0x340 [ 567.824902] do_fast_syscall_32+0x3ee/0xf9d [ 567.829214] ? do_int80_syscall_32+0x9d0/0x9d0 [ 567.833784] ? lockdep_sys_exit+0x47/0xf0 [ 567.837910] ? syscall_return_slowpath+0x2ad/0x550 [ 567.842824] ? sysret32_from_system_call+0x5/0x3b [ 567.847650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 567.852479] entry_SYSENTER_compat+0x51/0x60 [ 567.856864] RIP: 0023:0xf7febc79 [ 567.860205] RSP: 002b:00000000f77e708c EFLAGS: 00000296 ORIG_RAX: 000000000000011f [ 567.867889] RAX: ffffffffffffffda RBX: 000000002002eff5 RCX: 000000002026fffb [ 567.875134] RDX: 0000000020661000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.882379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.889625] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 567.896871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.904150] CPU: 0 PID: 17889 Comm: syz-executor4 Not tainted 4.15.0-rc1+ #114 [ 567.911511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.920850] Call Trace: [ 567.923414] dump_stack+0x194/0x257 [ 567.927021] ? arch_local_irq_restore+0x53/0x53 [ 567.931676] should_fail+0x8c0/0xa40 [ 567.935362] ? find_held_lock+0x39/0x1d0 [ 567.939397] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 567.944486] ? find_held_lock+0x39/0x1d0 [ 567.948532] ? lock_downgrade+0x980/0x980 [ 567.952670] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 567.958525] ? kernel_read+0x120/0x120 [ 567.962387] ? rcu_note_context_switch+0x710/0x710 [ 567.967301] should_failslab+0xec/0x120 [ 567.971249] __kmalloc_track_caller+0x5f/0x760 [ 567.975810] ? strncpy_from_user+0x430/0x430 [ 567.980191] ? mpi_resize+0x200/0x200 [ 567.983961] ? strndup_user+0x62/0xb0 [ 567.987742] memdup_user+0x2c/0x90 [ 567.991257] strndup_user+0x62/0xb0 [ 567.994860] SyS_request_key+0x8c/0x2a0 [ 567.998805] ? SyS_add_key+0x340/0x340 [ 568.002672] ? SyS_add_key+0x340/0x340 [ 568.006533] do_fast_syscall_32+0x3ee/0xf9d [ 568.010834] ? do_int80_syscall_32+0x9d0/0x9d0 [ 568.015395] ? lockdep_sys_exit+0x47/0xf0 [ 568.019514] ? syscall_return_slowpath+0x2ad/0x550 [ 568.024424] ? sysret32_from_system_call+0x5/0x3b [ 568.029243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 568.034065] entry_SYSENTER_compat+0x51/0x60 [ 568.038444] RIP: 0023:0xf7f1ac79 [ 568.041777] RSP: 002b:00000000f771608c EFLAGS: 00000296 ORIG_RAX: 000000000000011f [ 568.049457] RAX: ffffffffffffffda RBX: 000000002024e000 RCX: 0000000020d0d000 2017/12/02 09:13:54 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) inotify_init1(0x800) r0 = geteuid() getgroups(0x4, &(0x7f0000f73000-0x10)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) syz_fuseblk_mount(&(0x7f00007c2000-0x8)="2e2f66696c653000", &(0x7f00008eb000-0x8)="2e2f66696c653000", 0x4000, r0, r1, 0x9, 0xa0, 0x10420) 2017/12/02 09:13:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() syz_open_dev$vcsa(&(0x7f000068f000)="2f6465762f766373612300", 0x8001, 0x80) 2017/12/02 09:13:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000fe1000)="6b657972696e6700", &(0x7f0000017000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000e21000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f000005b000-0x7)="0003726f000200", r0) [ 568.056697] RDX: 0000000020dd5ff9 RSI: 00000000fffffffc RDI: 0000000000000000 [ 568.063939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.071178] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.078417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f00001a7000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000090000-0x4)=0xab) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:54 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00004da000)="2f6465762f73657175656e63657200", 0x6002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000417000-0xe8)={{{@in=@empty=0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000989000)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000de1000)={r3, 0x1, 0x6, @random="b534657d7d6e", [0x0, 0x0]}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00006e1000-0x9)="2f6465762f76637300", 0x400000, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000aa6000)=0x100) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) fcntl$setstatus(r0, 0x4, 0x42c00) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000739000)={0x7, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:54 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000169000+0x5c0)="617474722f6b657963726561746500") ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000a02000)=0x2) 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000cee000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:54 executing program 2: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000e29000)=0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x800000000000000}, @time=@tick=0x0}], 0x1c) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2017/12/02 09:13:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() 2017/12/02 09:13:54 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) statx(r0, &(0x7f00008dc000-0x8)="2e2f66696c653000", 0x6c00, 0x10, &(0x7f0000293000-0x100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:54 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0x8, 0x30000) connect$llc(r0, &(0x7f000034b000)={0x1a, 0xf9, 0x1, 0x0, 0x2, 0x20000, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000fcf000)="2f6465762f7663732300", 0xbe29, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000bc3000-0x67)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r1, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:54 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f000015a000)={0x0, 0x0, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc00c6419, &(0x7f0000148000)={0x5, &(0x7f0000ef3000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000071a000-0x50)=[{0x7, 0x1000, 0x7, &(0x7f0000f38000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x0, 0x46, 0xfffffffffffff801, &(0x7f0000e4c000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x6, 0xfb, 0x1, &(0x7f00000f0000-0xfb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x80000000, 0x3b, 0x80000001, &(0x7f00007ee000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {0x9, 0x35, 0x5, &(0x7f0000616000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) setns(r0, 0x4000000) 2017/12/02 09:13:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00003ef000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f25000)=0xb) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) recvmsg$kcm(r4, &(0x7f00005fb000-0x1c)={&(0x7f0000516000+0x4d4)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f00007de000-0x28)=[{&(0x7f0000093000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f000084f000-0xc2)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc2}, {&(0x7f0000a5e000-0x5d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5d}, {&(0x7f0000f1d000-0x6b)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6b}, {&(0x7f0000ff1000-0xfb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfb}], 0x5, &(0x7f0000abb000-0xf4)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf4, 0x0}, 0x20) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f00001b8000)={0x2, 0x78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x4, 0x3, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x34bb478f, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000f9c000)="2f6465762f6375736500", 0x400003, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000007000-0x8)={0x3, &(0x7f0000e90000-0x18)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000e7d000)={@loopback=0x0, @multicast1=0x0, 0x0}, &(0x7f0000162000-0x4)=0xc) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000666000-0x8)={r2, 0x11}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f000032d000)={0x0, @in6={{0xa, 0x0, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2416}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x6, 0x4, 0x9, 0x7, 0x7, 0x1000, 0x2, 0x4, 0x6, 0x5, 0x9, 0x100000001, 0x1, 0xb85]}, &(0x7f00003ec000-0x4)=0x108) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000398000)={r3, @in6={{0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xd0, 0x7, 0xb7f, 0x0}, &(0x7f0000c5d000)=0xa0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000e3a000)={r3, 0x6c, "d830cb5d50163000c47512b14626de428cc96d49acda86609e202225260bb70b0478809c2cb382bca20a015f71e8588b16dc69b8586b56243a3278cd93c4086f0b2c8bcf0a5168c54fae93fcdb208096d073c9bce91af01f63626f5a602bbdf32ee5d5570b6cf75904a11e7e"}, &(0x7f0000fde000-0x4)=0x74) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000681000-0x4)=0x1, 0x4) r4 = syz_open_dev$mouse(&(0x7f0000ea8000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0xc9, 0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000941000)={0x0, @in6={{0xa, 0x3, 0x5, @loopback={0x0, 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x80000000, 0x61afd55b, 0x6, 0x40}, &(0x7f0000a42000)=0xa0) getpeername$inet6(r0, &(0x7f0000c55000-0x1c)={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000ac5000-0x4)=0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f000080b000-0x14)={r5, 0x7, 0x700000000000000, 0x4, 0x4, 0x7}, &(0x7f0000efc000)=0x14) mlockall(0x4) 2017/12/02 09:13:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x8, 0x7fffffff, 0x3, 0x0}, {0x195, 0x0, 0x800200, 0x0}]}) gettid() r0 = memfd_create(&(0x7f0000a3f000-0x1)="00", 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000100000-0x4)=0x0, &(0x7f00009d2000-0x4)=0x4) 2017/12/02 09:13:54 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)="2f6465762f7663732300", 0xafd, 0x10200) socket$inet6_tcp(0xa, 0x1, 0x0) write$fuse(r0, &(0x7f0000f23000-0x30)={0x30, 0x1, 0x4, @fuse_notify_retrieve_out={0x4, 0x0, 0x40, 0x80}}, 0x30) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r1 = signalfd4(r0, &(0x7f0000f2e000-0x8)={0x9}, 0x8, 0x800) fcntl$setstatus(r0, 0x4, 0x800) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00008bd000-0x8)={0x0, 0x0}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00007ee000)=@add_del={0x2, &(0x7f000047f000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x8}) finit_module(r1, &(0x7f000089e000)="7b00", 0x1) fcntl$setsig(r0, 0xa, 0x36) 2017/12/02 09:13:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000511000-0x8)="2e2f66696c653000", 0xdff8) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000532000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x6, 0xfffffffffffffffe, 0x3f, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f00000bb000-0xd)="2f6465762f7573626d6f6e2300", 0x866, 0x100) sendto$ipx(r1, &(0x7f0000279000)="ce066e65e5f3609b297a4ebff18e9453e557974bebfdad6e74a1f09f01f4ecc37d1e31176d654569ebf91bc439783bc676168ca95657756d8a69387d2421240cfafe38bf3f0e648e987c6e8a76ac042550f4571174261610af697dca7adbafe9e61bee7cbbbe0c9a7b8fbc11b5f0e5220d9135bc6d1dbcac34e67d517d59a0af8ee78eb2436ddb61c97e80abfe8bc942004add0912fabc4df07c7642aba4c3c5ebcd8c33b4f6d2fa9e070683", 0xac, 0x4004004, &(0x7f000081a000-0x10)={0x4, 0x1ff, 0x0, "7868748f9150", 0x8, 0x0}, 0x10) 2017/12/02 09:13:55 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x80, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:55 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000000003f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x8, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x400000}, {0x6, 0x800000000, 0xfffffffffbffffff, 0x0}]}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000a92000)={0x0, 0x0}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x7fffc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000880000-0x6)={0x0, 0x3}, &(0x7f0000e66000-0x4)=0x6) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000804000)=@assoc_value={r2, 0x1}, &(0x7f0000ae6000-0x4)=0x8) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f000022b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") gettid() 2017/12/02 09:13:55 executing program 2 (fault-call:4 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:55 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0xfffffffbfffffffc) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) r4 = inotify_init1(0x0) r5 = fcntl$dupfd(r1, 0x1000000000000, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") recvfrom$ipx(r4, &(0x7f000092f000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf0, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000d0e000)={&(0x7f00009e7000+0xd99)="2e2f636f6e74726f6c00", r5}, 0xc) getsockopt$inet6_dccp_buf(r5, 0x21, 0xcf, &(0x7f000029d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00001dc000)=0x1000) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) r6 = add_key$keyring(&(0x7f0000004000-0x8)="6b657972696e6700", &(0x7f0000010000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f00004e8000)="6b657972696e6700", &(0x7f00007ff000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r6, &(0x7f0000b48000)=[], 0x0, r7) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) pipe(&(0x7f000065a000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000be2000-0xc)={0x0, 0x10, &(0x7f0000f5b000)=[@in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f000089c000-0x4)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00008f2000)={r1, 0x0}, 0x6) 2017/12/02 09:13:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:55 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00006d0000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001000-0xb)="706b6373375f7465737400", &(0x7f0000981000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000000000)="266d643573756d00", 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000db000-0xf)="2f6465762f73657175656e63657200", 0x20000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000e58000-0x10)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000c4f000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x4) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000056000)={r2, r3, 0x7}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001000)=0x40, 0x4) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/12/02 09:13:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) socketpair(0x3, 0x2, 0x1, &(0x7f0000b42000-0x8)={0x0, 0x0}) ioctl$KDDELIO(r0, 0x4b35, 0x80) ioctl$void(r0, 0x5450) 2017/12/02 09:13:55 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0xfff, 0x0, 0x0, 0xb6f, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc0000, 0x0}, 0x0, 0x100, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c9b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(0xffffffffffffffff, &(0x7f00004b9000)="", 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f00003de000)=@abs={0x0, 0x0, 0x0}, 0x8) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setns(r1, 0x8000000) r3 = request_key(&(0x7f0000354000-0xa)="73797a6b616c6c657200", &(0x7f00006d4000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f000095f000-0x1)="00", 0xfffffffffffffffd) r4 = request_key(&(0x7f0000799000)="6173796d6d657472696300", &(0x7f00005f4000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000200000-0x1)="00", 0x0) keyctl$negate(0xd, r3, 0x6, r4) r5 = syz_open_procfs(0x0, &(0x7f0000819000-0x10)="636f726564756d705f66696c74657200") sendfile(r5, r5, &(0x7f0000887000)=0x0, 0x94b) pread64(r5, &(0x7f00006d5000)="", 0x0, 0x0) shutdown(r2, 0x0) userfaultfd(0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x200) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000663000-0x15)="000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000972000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000291000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000000)={r8, r9, 0x8001}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000a19000-0xb)="2f6465762f766373612300", 0x8033, 0x10902) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000291000)={0x0, 0x1, 0x99, 0x3ff, 0x9, 0x8, 0x3, 0x2, {0x0, @in={{0x2, 0x3, @rand_addr=0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffb8063403, 0x9, 0x2, 0x7, 0x80}}, &(0x7f000013d000-0x4)=0xb8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f000032e000)={r11, 0x9af2}, &(0x7f00008c5000)=0x8) 2017/12/02 09:13:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000196000-0x8)="2e2f66696c653000", 0x20) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00006a5000)={@multicast1=0xe0000001, @rand_addr=0x3}, 0x8) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000bee000-0x10)=@req={0x7, 0x7ff, 0x1, 0x10000}, 0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000041000)=0x0, &(0x7f0000b0a000-0x2)=0x4) bind$bt_rfcomm(r0, &(0x7f0000b83000-0x9)={0x1f, {0x8000, 0x4, 0x1ff, 0x401, 0x5, 0xfcd5}, 0x2}, 0x9) mlockall(0x4) 2017/12/02 09:13:55 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f000054f000)={0x9a0, 0x101}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2017/12/02 09:13:55 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000c11000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x2001) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000076000-0x20)={@generic="5d1ed9c271a074cfcbc09fe918ad2146", @ifru_addrs={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) set_thread_area(&(0x7f0000366000-0x10)={0x3, 0xffffffff, 0x3000, 0xaa, 0x6, 0xb5, 0x200, 0x2, 0x7fff, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f000053f000)=0x10000) bind$bt_sco(r0, &(0x7f00002b8000)={0x1f, {0x3, 0x6, 0x0, 0x800, 0xffff, 0x3}}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000351000-0x8c)={0x0, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00006a1000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000ec7000-0x8)={0x0, 0x1}, &(0x7f00004bd000-0x4)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000ed5000)={r2, 0x9c98}, &(0x7f00005bf000)=0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000e7a000-0x8)={r3, 0x9}, &(0x7f0000793000-0x4)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000149000-0x10)={0x7, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000f03000-0x10)={0x8, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000806000)={0x7, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f00002a9000)={0x23a, r4, 0x2, 0x20000008004}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f0000a99000)={r5, 0x3ff}) connect(r1, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00004f8000-0xa6)={0x0, 0x9e, "e5367e8d97e0ed138ffbb9aef41a9d1b2515ff0d67a3c092d1808ac4b6f91d64304c35ada431c5d270b2062e15cd220f75f53bfd493207c6cf545120a3e5593199fbcc1b0108e1d2e12861b140725d0a62145bfd2b87812f958ab8ddd396fa6fd4d4d2af6a59390dece991aa67e83155d5e165f8c0963662851b68d41175c34009c7be68f188a4fa86d5ccff3b43ebe84ac62dd25c944874462c5a1e05eb"}, &(0x7f000094b000)=0xa6) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000eb2000-0x8c)={r6, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) 2017/12/02 09:13:55 executing program 2 (fault-call:4 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 568.437074] sg_write: 13 callbacks suppressed [ 568.437082] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 568.437082] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:13:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000da1000)="2f6465762f76637300", 0x80000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f000016e000)={0x7ff, 0x2000}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:55 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001000-0x4)=0x2, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x18a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000535000)="2f6465762f6877726e6700", 0xc02, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000-0x3f)={0x0, 0x78, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x7, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) [ 568.443605] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 568.443605] program syz-executor2 not setting count and/or reply_len properly [ 568.443618] FAULT_INJECTION: forcing a failure. [ 568.443618] name failslab, interval 1, probability 0, space 0, times 0 2017/12/02 09:13:55 executing program 2 (fault-call:4 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:55 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000833000-0x1c)={0xc, 0x3, 0xfffffffffffffe00, 0x800, 0x5, 0xffffffffffffffff, 0x9}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00003d9000-0x9)="2f6465762f76637300", 0x101040, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000415000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}) 2017/12/02 09:13:55 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000f44000-0x8)={0x0, 0x0}) 2017/12/02 09:13:55 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r1 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000de6000)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000cfa000-0x9)="2f6465762f76637300", 0x902, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f000004d000-0xc)={r3, r0, 0x1}) [ 568.443627] CPU: 0 PID: 18000 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 568.443633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.443636] Call Trace: [ 568.443648] dump_stack+0x194/0x257 [ 568.443665] ? arch_local_irq_restore+0x53/0x53 [ 568.443678] ? __unlock_page_memcg+0x72/0x100 [ 568.443702] should_fail+0x8c0/0xa40 [ 568.443717] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 568.443735] ? __lock_acquire+0x6e9/0x47f0 [ 568.443750] ? print_usage_bug+0x3f0/0x3f0 [ 568.443784] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 568.443817] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 568.443826] ? lock_acquire+0x1d5/0x580 [ 568.443837] ? rcu_note_context_switch+0x710/0x710 [ 568.443861] should_failslab+0xec/0x120 [ 568.443874] kmem_cache_alloc_node+0x56/0x760 [ 568.443880] ? perf_trace_lock+0x900/0x900 [ 568.443915] create_task_io_context+0xba/0x540 [ 568.443928] ? ioc_clear_queue+0x5e0/0x5e0 [ 568.443951] ? find_held_lock+0x39/0x1d0 [ 568.443987] ? lock_downgrade+0x980/0x980 [ 568.444000] ? down_trylock+0x13/0x70 [ 568.444026] blk_get_request_flags+0x3f0/0x6b0 [ 568.444040] ? blk_queue_enter+0xc30/0xc30 [ 568.444050] ? do_raw_spin_trylock+0x190/0x190 [ 568.444064] ? kvm_sched_clock_read+0x25/0x40 [ 568.444075] ? sched_clock+0x31/0x40 [ 568.444092] blk_get_request+0x2c/0x40 [ 568.444109] sg_common_write.isra.17+0x47f/0x1cb0 [ 568.444123] ? lock_pin_lock+0x1c0/0x370 [ 568.444149] ? sg_open+0x1190/0x1190 [ 568.444177] ? vprintk_default+0x28/0x30 [ 568.444190] ? vprintk_func+0x5e/0xc0 [ 568.444203] ? printk+0xaa/0xca [ 568.444214] ? show_regs_print_info+0x65/0x65 [ 568.444229] ? idr_get_free_cmn+0xfd0/0xfd0 [ 568.444246] ? __might_sleep+0x95/0x190 [ 568.444275] sg_write+0x7a6/0xca0 [ 568.444300] ? sg_ioctl+0x2da0/0x2da0 [ 568.444308] ? __lock_is_held+0xbc/0x140 [ 568.444350] ? __fget+0x362/0x580 [ 568.444379] ? iterate_fd+0x3f0/0x3f0 [ 568.444393] ? proc_fail_nth_write+0xb5/0x260 [ 568.444406] ? map_files_get_link+0x3a0/0x3a0 [ 568.444413] ? __lock_is_held+0xbc/0x140 [ 568.444438] ? find_held_lock+0x39/0x1d0 [ 568.444461] ? sg_ioctl+0x2da0/0x2da0 [ 568.444469] __vfs_write+0xef/0x970 [ 568.444479] ? rcu_note_context_switch+0x710/0x710 [ 568.444492] ? kernel_read+0x120/0x120 [ 568.444503] ? __might_sleep+0x95/0x190 [ 568.444517] ? _cond_resched+0x14/0x30 [ 568.444527] ? __inode_security_revalidate+0xd9/0x130 [ 568.444541] ? avc_policy_seqno+0x9/0x20 [ 568.444551] ? selinux_file_permission+0x82/0x460 [ 568.444570] ? security_file_permission+0x89/0x1f0 [ 568.444588] ? rw_verify_area+0xe5/0x2b0 [ 568.444597] ? __fdget_raw+0x20/0x20 [ 568.444612] vfs_write+0x18f/0x510 [ 568.444631] SyS_write+0xef/0x220 [ 568.444639] ? __do_page_fault+0x3d6/0xc90 [ 568.444653] ? SyS_read+0x220/0x220 [ 568.444668] ? do_fast_syscall_32+0x156/0xf9d [ 568.444685] ? SyS_read+0x220/0x220 [ 568.444698] do_fast_syscall_32+0x3ee/0xf9d [ 568.444721] ? do_int80_syscall_32+0x9d0/0x9d0 [ 568.444742] ? lockdep_sys_exit+0x47/0xf0 [ 568.444753] ? syscall_return_slowpath+0x2ad/0x550 [ 568.444769] ? sysret32_from_system_call+0x5/0x3b [ 568.444787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 568.444808] entry_SYSENTER_compat+0x51/0x60 [ 568.444815] RIP: 0023:0xf7f0fc79 [ 568.444819] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 568.444826] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000201ea000 [ 568.444830] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.444834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.444838] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.444842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.445336] __get_request: dev 8:0: request aux data allocation failed, iosched may be disturbed [ 568.535261] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 568.535261] program syz-executor2 not setting count and/or reply_len properly [ 568.535298] FAULT_INJECTION: forcing a failure. [ 568.535298] name failslab, interval 1, probability 0, space 0, times 0 [ 568.535309] CPU: 0 PID: 18022 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 568.535315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.535319] Call Trace: [ 568.535334] dump_stack+0x194/0x257 [ 568.535352] ? arch_local_irq_restore+0x53/0x53 [ 568.535390] should_fail+0x8c0/0xa40 [ 568.535399] ? lock_pin_lock+0x370/0x370 [ 568.535415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 568.535427] ? perf_trace_lock_acquire+0xe3/0x980 [ 568.535440] ? perf_trace_lock_acquire+0xe3/0x980 [ 568.535462] ? perf_trace_lock_acquire+0xe3/0x980 [ 568.535471] ? perf_trace_lock+0x900/0x900 [ 568.535486] ? check_noncircular+0x20/0x20 [ 568.535502] ? perf_trace_lock+0x900/0x900 [ 568.535509] ? lock_downgrade+0x980/0x980 [ 568.535524] ? __radix_tree_lookup+0x435/0x5e0 [ 568.535545] ? __radix_tree_lookup+0x435/0x5e0 [ 568.535557] ? check_noncircular+0x20/0x20 [ 568.535571] ? find_held_lock+0x39/0x1d0 [ 568.535595] should_failslab+0xec/0x120 [ 568.535609] kmem_cache_alloc_node_trace+0x5a/0x760 [ 568.535631] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 568.535651] ? free_request_size+0x70/0x70 [ 568.535661] __kmalloc_node+0x33/0x70 [ 568.535677] alloc_request_size+0x80/0x120 [ 568.535696] mempool_alloc+0x16a/0x4b0 [ 568.535720] ? remove_element.isra.4+0x1b0/0x1b0 [ 568.535732] ? ioc_release_fn+0x280/0x280 [ 568.535747] ? do_raw_spin_trylock+0x190/0x190 [ 568.535761] ? _raw_spin_unlock_irq+0x27/0x70 [ 568.535776] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 568.535798] get_request+0xe11/0x2450 [ 568.535845] ? trace_event_raw_event_block_rq_requeue+0x6e0/0x6e0 [ 568.535863] ? perf_trace_lock_acquire+0xe3/0x980 [ 568.535872] ? lock_release+0xda0/0xda0 [ 568.535896] ? perf_trace_lock+0x900/0x900 [ 568.535909] ? create_task_io_context+0x364/0x540 [ 568.535931] ? blk_queue_enter+0xa07/0xc30 [ 568.535937] ? lock_release+0xda0/0xda0 [ 568.535950] ? __raw_spin_lock_init+0x1c/0x100 [ 568.535969] ? blk_exit_rl+0x80/0x80 [ 568.535980] ? __lockdep_init_map+0xe4/0x650 [ 568.536011] ? lock_acquire+0x1d5/0x580 [ 568.536021] ? blk_get_request_flags+0x2d9/0x6b0 [ 568.536047] ? lock_release+0xda0/0xda0 [ 568.536074] ? finish_wait+0x490/0x490 [ 568.536086] ? down_trylock+0x13/0x70 [ 568.536114] blk_get_request_flags+0x2e9/0x6b0 [ 568.536129] ? blk_queue_enter+0xc30/0xc30 [ 568.536141] ? do_raw_spin_trylock+0x190/0x190 [ 568.536155] ? kvm_sched_clock_read+0x25/0x40 [ 568.536166] ? sched_clock+0x31/0x40 [ 568.536184] blk_get_request+0x2c/0x40 [ 568.536200] sg_common_write.isra.17+0x47f/0x1cb0 [ 568.536214] ? lock_pin_lock+0x1c0/0x370 [ 568.536249] ? sg_open+0x1190/0x1190 [ 568.536279] ? vprintk_default+0x28/0x30 [ 568.536294] ? vprintk_func+0x5e/0xc0 [ 568.536307] ? printk+0xaa/0xca [ 568.536318] ? show_regs_print_info+0x65/0x65 [ 568.536334] ? idr_get_free_cmn+0xfd0/0xfd0 [ 568.536345] ? __might_sleep+0x95/0x190 [ 568.536372] sg_write+0x7a6/0xca0 [ 568.536395] ? sg_ioctl+0x2da0/0x2da0 [ 568.536403] ? __lock_is_held+0xbc/0x140 [ 568.536441] ? __fget+0x362/0x580 [ 568.536470] ? iterate_fd+0x3f0/0x3f0 [ 568.536484] ? proc_fail_nth_write+0xb5/0x260 [ 568.536496] ? map_files_get_link+0x3a0/0x3a0 [ 568.536503] ? __lock_is_held+0xbc/0x140 [ 568.536527] ? find_held_lock+0x39/0x1d0 [ 568.536546] ? sg_ioctl+0x2da0/0x2da0 [ 568.536554] __vfs_write+0xef/0x970 [ 568.536564] ? rcu_note_context_switch+0x710/0x710 [ 568.536577] ? kernel_read+0x120/0x120 [ 568.536585] ? __might_sleep+0x95/0x190 [ 568.536600] ? _cond_resched+0x14/0x30 [ 568.536609] ? __inode_security_revalidate+0xd9/0x130 [ 568.536622] ? avc_policy_seqno+0x9/0x20 [ 568.536631] ? selinux_file_permission+0x82/0x460 [ 568.536647] ? security_file_permission+0x89/0x1f0 [ 568.536664] ? rw_verify_area+0xe5/0x2b0 [ 568.536670] ? __fdget_raw+0x20/0x20 [ 568.536685] vfs_write+0x18f/0x510 [ 568.536701] SyS_write+0xef/0x220 [ 568.536711] ? __do_page_fault+0x3d6/0xc90 [ 568.536727] ? SyS_read+0x220/0x220 [ 568.536743] ? do_fast_syscall_32+0x156/0xf9d [ 568.536760] ? SyS_read+0x220/0x220 [ 568.536773] do_fast_syscall_32+0x3ee/0xf9d [ 568.536798] ? do_int80_syscall_32+0x9d0/0x9d0 [ 568.536820] ? lockdep_sys_exit+0x47/0xf0 [ 568.536830] ? syscall_return_slowpath+0x2ad/0x550 [ 568.536846] ? sysret32_from_system_call+0x5/0x3b [ 568.536864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 568.536886] entry_SYSENTER_compat+0x51/0x60 [ 568.536893] RIP: 0023:0xf7f0fc79 [ 568.536898] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 568.536908] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000201ea000 [ 568.536912] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.536917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.536921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.536926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.559481] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 568.559481] program syz-executor0 not setting count and/or reply_len properly [ 568.572331] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 568.572331] program syz-executor2 not setting count and/or reply_len properly [ 568.572377] FAULT_INJECTION: forcing a failure. [ 568.572377] name failslab, interval 1, probability 0, space 0, times 0 [ 568.572386] CPU: 0 PID: 18033 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 568.572392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.572395] Call Trace: [ 568.572410] dump_stack+0x194/0x257 [ 568.572428] ? arch_local_irq_restore+0x53/0x53 [ 568.572463] should_fail+0x8c0/0xa40 [ 568.572474] ? unwind_get_return_address+0x61/0xa0 [ 568.572490] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 568.572506] ? depot_save_stack+0x12c/0x490 [ 568.572531] ? save_stack+0xa3/0xd0 [ 568.572542] ? save_stack+0x43/0xd0 [ 568.572549] ? kasan_kmalloc+0xad/0xe0 [ 568.572557] ? __kmalloc_node+0x47/0x70 [ 568.572565] ? alloc_request_size+0x80/0x120 [ 568.572574] ? mempool_alloc+0x16a/0x4b0 [ 568.572583] ? get_request+0xe11/0x2450 [ 568.572591] ? blk_get_request_flags+0x2e9/0x6b0 [ 568.572599] ? blk_get_request+0x2c/0x40 [ 568.572609] ? sg_common_write.isra.17+0x47f/0x1cb0 [ 568.572617] ? sg_write+0x7a6/0xca0 [ 568.572625] ? __vfs_write+0xef/0x970 [ 568.572632] ? vfs_write+0x18f/0x510 [ 568.572640] ? SyS_write+0xef/0x220 [ 568.572650] ? do_fast_syscall_32+0x3ee/0xf9d [ 568.572660] ? entry_SYSENTER_compat+0x51/0x60 [ 568.572675] ? __radix_tree_lookup+0x435/0x5e0 [ 568.572699] ? find_held_lock+0x39/0x1d0 [ 568.572712] ? check_noncircular+0x20/0x20 [ 568.572723] ? rcu_pm_notify+0xc0/0xc0 [ 568.572734] ? find_held_lock+0x39/0x1d0 [ 568.572758] should_failslab+0xec/0x120 [ 568.572772] kmem_cache_alloc_node+0x56/0x760 [ 568.572783] ? kmem_cache_alloc_node_trace+0x370/0x760 [ 568.572799] ? kasan_unpoison_shadow+0x35/0x50 [ 568.572822] scsi_old_init_rq+0x108/0x2e0 [ 568.572836] ? scsi_mq_get_budget+0x2e0/0x2e0 [ 568.572845] ? free_request_size+0x70/0x70 [ 568.572856] alloc_request_size+0xc8/0x120 [ 568.572874] mempool_alloc+0x16a/0x4b0 [ 568.572897] ? remove_element.isra.4+0x1b0/0x1b0 [ 568.572910] ? ioc_release_fn+0x280/0x280 [ 568.572926] ? do_raw_spin_trylock+0x190/0x190 [ 568.572940] ? _raw_spin_unlock_irq+0x27/0x70 [ 568.572960] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 568.572983] get_request+0xe11/0x2450 [ 568.573028] ? trace_event_raw_event_block_rq_requeue+0x6e0/0x6e0 [ 568.573049] ? perf_trace_lock_acquire+0xe3/0x980 [ 568.573059] ? lock_release+0xda0/0xda0 [ 568.573083] ? perf_trace_lock+0x900/0x900 [ 568.573096] ? create_task_io_context+0x364/0x540 [ 568.573118] ? blk_queue_enter+0xa07/0xc30 [ 568.573126] ? lock_release+0xda0/0xda0 [ 568.573140] ? __raw_spin_lock_init+0x1c/0x100 [ 568.573159] ? blk_exit_rl+0x80/0x80 [ 568.573170] ? __lockdep_init_map+0xe4/0x650 [ 568.573200] ? lock_acquire+0x1d5/0x580 [ 568.573211] ? blk_get_request_flags+0x2d9/0x6b0 [ 568.573241] ? lock_release+0xda0/0xda0 [ 568.573271] ? finish_wait+0x490/0x490 [ 568.573285] ? down_trylock+0x13/0x70 [ 568.573315] blk_get_request_flags+0x2e9/0x6b0 [ 568.573332] ? blk_queue_enter+0xc30/0xc30 [ 568.573346] ? do_raw_spin_trylock+0x190/0x190 [ 568.573363] ? kvm_sched_clock_read+0x25/0x40 [ 568.573375] ? sched_clock+0x31/0x40 [ 568.573393] blk_get_request+0x2c/0x40 [ 568.573408] sg_common_write.isra.17+0x47f/0x1cb0 [ 568.573422] ? lock_pin_lock+0x1c0/0x370 [ 568.573449] ? sg_open+0x1190/0x1190 [ 568.573478] ? vprintk_default+0x28/0x30 [ 568.573491] ? vprintk_func+0x5e/0xc0 [ 568.573503] ? printk+0xaa/0xca [ 568.573515] ? show_regs_print_info+0x65/0x65 [ 568.573531] ? idr_get_free_cmn+0xfd0/0xfd0 [ 568.573542] ? __might_sleep+0x95/0x190 [ 568.573571] sg_write+0x7a6/0xca0 [ 568.573595] ? sg_ioctl+0x2da0/0x2da0 [ 568.573601] ? __lock_is_held+0xbc/0x140 [ 568.573640] ? __fget+0x362/0x580 [ 568.573670] ? iterate_fd+0x3f0/0x3f0 [ 568.573683] ? proc_fail_nth_write+0xb5/0x260 [ 568.573696] ? map_files_get_link+0x3a0/0x3a0 [ 568.573703] ? __lock_is_held+0xbc/0x140 [ 568.573727] ? find_held_lock+0x39/0x1d0 [ 568.573749] ? sg_ioctl+0x2da0/0x2da0 [ 568.573757] __vfs_write+0xef/0x970 [ 568.573767] ? rcu_note_context_switch+0x710/0x710 [ 568.573781] ? kernel_read+0x120/0x120 [ 568.573791] ? __might_sleep+0x95/0x190 [ 568.573808] ? _cond_resched+0x14/0x30 [ 568.573819] ? __inode_security_revalidate+0xd9/0x130 [ 568.573833] ? avc_policy_seqno+0x9/0x20 [ 568.573843] ? selinux_file_permission+0x82/0x460 [ 568.573863] ? security_file_permission+0x89/0x1f0 [ 568.573882] ? rw_verify_area+0xe5/0x2b0 [ 568.573890] ? __fdget_raw+0x20/0x20 [ 568.573906] vfs_write+0x18f/0x510 [ 568.573927] SyS_write+0xef/0x220 [ 568.573935] ? __do_page_fault+0x3d6/0xc90 [ 568.573950] ? SyS_read+0x220/0x220 [ 568.573965] ? do_fast_syscall_32+0x156/0xf9d [ 568.573982] ? SyS_read+0x220/0x220 [ 568.573995] do_fast_syscall_32+0x3ee/0xf9d [ 568.574021] ? do_int80_syscall_32+0x9d0/0x9d0 [ 568.574044] ? lockdep_sys_exit+0x47/0xf0 [ 568.574055] ? syscall_return_slowpath+0x2ad/0x550 [ 568.574074] ? sysret32_from_system_call+0x5/0x3b [ 568.574096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 568.574122] entry_SYSENTER_compat+0x51/0x60 [ 568.574129] RIP: 0023:0xf7f0fc79 [ 568.574133] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 2017/12/02 09:13:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r3 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r4 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) writev(r2, &(0x7f000053c000-0x8)=[{&(0x7f00006bd000)="fda9d8c3df1ce1dea8745bf791a6c504e5a173173efe4e415c072eadedc56de6f114", 0x22}], 0x1) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000e9c000-0x8)="6b657972696e6700", &(0x7f0000e97000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000b75000-0x4)=0x0, &(0x7f0000cba000)=0x4) request_key(&(0x7f0000543000-0xa)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", r0) 2017/12/02 09:13:56 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) 2017/12/02 09:13:56 executing program 2 (fault-call:4 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:56 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) ioctl(r0, 0x7fffffff, &(0x7f0000ba0000+0x6f3)="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") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00004e8000)=0x0) rt_sigqueueinfo(r1, 0x6, &(0x7f0000aec000)={0x40, 0x1ff, 0x4, 0x6}) 2017/12/02 09:13:56 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f000046f000)={0x0, 0x0}, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000686000)={[{0x7, 0x8e, 0x4, 0x9, 0x1, 0xf8, 0xfffffffffffffff9, 0x8000, 0x1f, 0x401, 0xfffffffffffffffb, 0x2, 0x9}, {0xf312, 0x5, 0xf787, 0x5, 0xebc, 0x400, 0x8, 0xb6a4, 0x7000000000, 0x5, 0x9, 0xffffffff, 0x0}, {0x8, 0x101, 0x3, 0x7fffffff, 0xa1b4, 0x0, 0x100000000, 0x7ff, 0x6, 0x100, 0x7ff, 0x3, 0xfffffffffffffff9}], 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r1, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:56 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000e87000)="2f6465762f6375736500", 0x200, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000036000-0x14)={{0x7, 0x9c, 0x10001, 0x1, 0x3, 0x0}, 0x6, 0x4, 0x75f7}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:56 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000018e000-0x8)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x9, 0x8, 0x0, 0x0}]}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000091f000)="2f6465762f6375736500", 0x1, 0x0) recvmsg$kcm(r0, &(0x7f000008d000)={&(0x7f0000839000)=@alg={0x0, "0000000000000000000000000000", 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58, &(0x7f00008d1000)=[{&(0x7f0000091000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x31}, {&(0x7f0000fed000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x48}, {&(0x7f00002b4000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc0}, {&(0x7f0000a94000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3d}, {&(0x7f0000a79000-0x9c)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9c}, {&(0x7f00004ec000-0x5d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5d}, {&(0x7f000016d000-0xce)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xce}, {&(0x7f0000add000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc4}, {&(0x7f00002fc000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6c}], 0x9, 0x0, 0x0, 0x0}, 0x2100) lstat(&(0x7f0000701000)="2e2f66696c653000", &(0x7f0000961000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000c9c000)={0xa, 0x1, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x962}, 0x1c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbc000)=nil, 0xfbc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00008e2000-0x10)={0x1a, 0x0, 0x0, 0x40000000000, 0x1, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) sched_yield() r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000fbd000)=0x0) perf_event_open(&(0x7f00006d1000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fbc000)="2f6465762f6b766d00", 0x94335c57339aa05f, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x0, 0x80000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x10000000) r3 = syz_open_dev$sg(&(0x7f00004cf000-0x9)="2f6465762f73672300", 0x0, 0x0) readahead(r3, 0x0, 0x0) [ 568.574143] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000201ea000 [ 568.574149] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.574154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.574159] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.574164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 09:13:56 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x4, 0x7ff, 0x8001, 0x9}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005cd000)="2f6465762f73657175656e6365723200", 0x12200, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f000093e000-0x4)=0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7) 2017/12/02 09:13:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) pwrite64(r0, &(0x7f0000816000-0x88)="881d95e8a707b130accbffc1d2d63370ea053103253c52a3d302a68e81b77dfa61a776184010e81d0ddf5dc66e6955591082c4b846d6da3d197f500e657e810b92f09392ab6c1f269ac586eb5cc934459f789cdd650ee48d1bf209d9fb450a6441202e96ddbb8a40596f527d8a878ca7b3135cd8983f4d70450ce28f4ea12bf75e6637491b3e6ea2", 0x88, 0x0) 2017/12/02 09:13:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) prctl$setmm(0x23, 0x3, &(0x7f00009e8000/0x1000)=nil) r0 = geteuid() fstat(0xffffffffffffff9c, &(0x7f000019d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000cdd000)="2f6465762f7667615f6172626974657200", 0x100, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x4) syz_fuseblk_mount(&(0x7f0000021000)="2e2f66696c653000", &(0x7f0000b8e000-0x8)="2e2f66696c653000", 0xe000, r0, r1, 0x400000, 0x4, 0x4000) [ 570.031909] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 570.031909] program syz-executor2 not setting count and/or reply_len properly [ 570.055120] FAULT_INJECTION: forcing a failure. [ 570.055120] name failslab, interval 1, probability 0, space 0, times 0 2017/12/02 09:13:56 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x4, 0x7, 0x1f) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000df0000)={0x7, "73927b5badda"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) arch_prctl(0x1004, &(0x7f000063c000)="ec024b433f3ab930d3e3cf4b254772fd39371f9ee93cf5c6d4af6f61e8ebd52dd24689baf556c652dcd5285b92cda91e54b27129bd57ae11a78e9c6e8a3905ee17d6adf8d1da5ce5406268") keyctl$session_to_parent(0x12) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000929000-0x4)=0x0) pipe(&(0x7f00000ba000-0x8)={0x0, 0x0}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00008a0000-0x3a)={0x1, 0x9, [@random="1992de86eb3c", @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @random="5035cfe13189", @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="cd40c300cb7c"]}) mlockall(0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xff) rt_sigtimedwait(&(0x7f0000b0a000)={0xbed2}, &(0x7f0000473000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ad8000-0x8)={0x77359400, 0x0}, 0x8) 2017/12/02 09:13:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00002d7000)=[{&(0x7f00005d5000)="ec", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000002000-0x8)=0x2, 0x1, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f0000d53000-0xcb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000001000-0x4)=0xcb) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x4) mlockall(0x4) [ 570.079061] CPU: 1 PID: 18056 Comm: syz-executor2 Not tainted 4.15.0-rc1+ #114 [ 570.086455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.086875] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 570.086875] program syz-executor0 not setting count and/or reply_len properly [ 570.111569] Call Trace: [ 570.114151] dump_stack+0x194/0x257 [ 570.117782] ? arch_local_irq_restore+0x53/0x53 [ 570.122468] should_fail+0x8c0/0xa40 [ 570.126174] ? scsi_old_init_rq+0x108/0x2e0 2017/12/02 09:13:56 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000919000-0x8)="2e2f66696c653000", 0x100, 0x0, &(0x7f000053d000-0x100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00003af000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x400080) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000d3c000-0x20)={@generic="04c9ef3b124a85fc7508bf4d240363fa", @ifru_flags=0x0}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000c69000)={{0x2, 0x3, @rand_addr=0xd6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @random="d5d047259dd5", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x48, {0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000487000-0x10)={0x0, 0xffffffffffffb812, 0x0, 0x3}, &(0x7f000009b000-0x4)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00008b0000-0x10)={0x4, 0x2, 0x7fffffff, 0xff, r1}, &(0x7f0000cd8000-0x4)=0x10) mlockall(0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000bda000)={0x1000, 0x2000, 0x0}) [ 570.128330] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 570.128330] program syz-executor0 not setting count and/or reply_len properly [ 570.146257] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 570.151362] ? sg_write+0x7a6/0xca0 [ 570.154985] ? vfs_write+0x18f/0x510 [ 570.158690] ? SyS_write+0xef/0x220 [ 570.162317] ? do_fast_syscall_32+0x3ee/0xf9d [ 570.166806] ? entry_SYSENTER_compat+0x51/0x60 [ 570.167293] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; 2017/12/02 09:13:56 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:56 executing program 7: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000d2000-0x5c)={0x4946, 0x9, 0x3, {0x0, 0x0}, 0x7, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000b93000)="00", 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x100000810000004) [ 570.167293] program syz-executor0 not setting count and/or reply_len properly [ 570.187138] ? save_stack+0x43/0xd0 [ 570.190753] ? kasan_kmalloc+0xad/0xe0 [ 570.193511] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 570.193511] program syz-executor0 not setting count and/or reply_len properly [ 570.210395] ? __kmalloc_node+0x47/0x70 [ 570.214363] ? alloc_request_size+0x80/0x120 [ 570.218769] ? mempool_alloc+0x16a/0x4b0 [ 570.222822] ? get_request+0xe11/0x2450 [ 570.226788] ? blk_get_request_flags+0x2e9/0x6b0 [ 570.231528] ? blk_get_request+0x2c/0x40 [ 570.235560] ? sg_common_write.isra.17+0x47f/0x1cb0 [ 570.240544] ? sg_write+0x7a6/0xca0 [ 570.244141] ? __vfs_write+0xef/0x970 [ 570.247909] ? vfs_write+0x18f/0x510 [ 570.251599] ? SyS_write+0xef/0x220 [ 570.255202] ? do_fast_syscall_32+0x3ee/0xf9d [ 570.259668] ? entry_SYSENTER_compat+0x51/0x60 [ 570.264225] ? __radix_tree_lookup+0x435/0x5e0 [ 570.268794] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 570.274654] ? rcu_note_context_switch+0x710/0x710 [ 570.279554] ? scsi_old_init_rq+0x108/0x2e0 [ 570.283851] should_failslab+0xec/0x120 [ 570.287802] kmem_cache_alloc_node+0x56/0x760 [ 570.292280] ioc_create_icq+0x128/0x910 [ 570.296233] ? get_task_io_context+0x100/0x100 [ 570.300788] ? sched_clock+0x31/0x40 [ 570.304473] ? blk_rq_init+0x314/0x460 [ 570.308333] ? perf_trace_block_split+0xae0/0xae0 [ 570.313148] ? do_raw_spin_trylock+0x190/0x190 [ 570.317712] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 570.322710] get_request+0x1d2a/0x2450 [ 570.326585] ? trace_event_raw_event_block_rq_requeue+0x6e0/0x6e0 [ 570.332810] ? lock_release+0xda0/0xda0 [ 570.336773] ? create_task_io_context+0x364/0x540 [ 570.341592] ? blk_queue_enter+0xa07/0xc30 [ 570.345802] ? lock_release+0xda0/0xda0 [ 570.349761] ? __raw_spin_lock_init+0x1c/0x100 [ 570.354320] ? blk_exit_rl+0x80/0x80 [ 570.358008] ? __lockdep_init_map+0xe4/0x650 [ 570.362406] ? lock_acquire+0x1d5/0x580 [ 570.366356] ? blk_get_request_flags+0x2d9/0x6b0 [ 570.371090] ? llist_add_batch+0xf3/0x180 [ 570.375212] ? lock_release+0xda0/0xda0 [ 570.379163] ? finish_wait+0x490/0x490 [ 570.383031] ? irq_work_queue+0xf7/0x170 [ 570.387074] blk_get_request_flags+0x2e9/0x6b0 [ 570.391631] ? blk_queue_enter+0xc30/0xc30 [ 570.395840] ? console_unlock+0x983/0xd80 [ 570.399976] blk_get_request+0x2c/0x40 [ 570.403844] sg_common_write.isra.17+0x47f/0x1cb0 [ 570.408685] ? sg_open+0x1190/0x1190 [ 570.412381] ? vprintk_default+0x28/0x30 [ 570.416415] ? vprintk_func+0x5e/0xc0 [ 570.420186] ? printk+0xaa/0xca [ 570.423435] ? show_regs_print_info+0x65/0x65 [ 570.427903] ? idr_get_free_cmn+0xfd0/0xfd0 [ 570.432196] ? __might_sleep+0x95/0x190 [ 570.436147] sg_write+0x7a6/0xca0 [ 570.439578] ? sg_ioctl+0x2da0/0x2da0 [ 570.443346] ? __lock_is_held+0xbc/0x140 [ 570.447389] ? __fget+0x362/0x580 [ 570.450820] ? iterate_fd+0x3f0/0x3f0 [ 570.454592] ? proc_fail_nth_write+0xb5/0x260 [ 570.459059] ? map_files_get_link+0x3a0/0x3a0 [ 570.463523] ? __lock_is_held+0xbc/0x140 [ 570.467562] ? find_held_lock+0x39/0x1d0 [ 570.471600] ? sg_ioctl+0x2da0/0x2da0 [ 570.475371] __vfs_write+0xef/0x970 [ 570.478970] ? rcu_note_context_switch+0x710/0x710 [ 570.483870] ? kernel_read+0x120/0x120 [ 570.487729] ? __might_sleep+0x95/0x190 [ 570.491676] ? _cond_resched+0x14/0x30 [ 570.495535] ? __inode_security_revalidate+0xd9/0x130 [ 570.500705] ? avc_policy_seqno+0x9/0x20 [ 570.504737] ? selinux_file_permission+0x82/0x460 [ 570.509553] ? security_file_permission+0x89/0x1f0 [ 570.514456] ? rw_verify_area+0xe5/0x2b0 [ 570.518486] ? __fdget_raw+0x20/0x20 [ 570.522181] vfs_write+0x18f/0x510 [ 570.525701] SyS_write+0xef/0x220 [ 570.529135] ? __do_page_fault+0x3d6/0xc90 [ 570.533343] ? SyS_read+0x220/0x220 [ 570.536942] ? do_fast_syscall_32+0x156/0xf9d [ 570.541410] ? SyS_read+0x220/0x220 [ 570.545012] do_fast_syscall_32+0x3ee/0xf9d [ 570.549322] ? do_int80_syscall_32+0x9d0/0x9d0 [ 570.553879] ? lockdep_sys_exit+0x47/0xf0 [ 570.557997] ? syscall_return_slowpath+0x2ad/0x550 [ 570.562903] ? sysret32_from_system_call+0x5/0x3b [ 570.567739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 570.572584] entry_SYSENTER_compat+0x51/0x60 [ 570.576972] RIP: 0023:0xf7f0fc79 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00008d9000)="2f6465762f73672300", 0x1000, 0x0) mmap(&(0x7f0000000000/0x1d000)=nil, 0x1d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f000000a000)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0xbc, &(0x7f0000000000)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @random="58b30180e54f", [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x3fe, 0xae, 0x0, 0x8, 0x2, 0x3f, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @udp={0x2, 0x3, 0x9a, 0x0, "679996e0cc56ed852137ba8999fa17889d5637f99be446cf6f33a5e42abdcb99da01d448ca0430b5379eb7b377f97cb11739788234f9025e4b6a47e90d4fd4d5e0f820c91779920c5da807c7e118a4703e72dbdcaa6cfef0f3974033271426330a24ad862349ba2d87ed08e8b2c92bf67acfe418afcdeb2d86a897ad9d169a583ad1137402000000000000005046382979c5"}}}}}, 0x0) mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f000001f000-0x8)={0x42424242, 0x42424242}, 0x80005, 0xc000000000000000) mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f000001f000-0x8)={0x42424242, 0x42424242}, 0xfff, 0xffffffffffffffff) syz_emit_ethernet(0xe1, &(0x7f000000e000-0xe9)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x8, 0x4, 0x0, 0x400000000000000, 0xd3, 0x0, 0x1, 0x0, 0x6, 0x0, @multicast2=0xe0000002, @broadcast=0xffffffff, {[@end={0x0}, @lsrr={0x83, 0xb, 0xfffffffffffffffd, [@rand_addr=0x4, @multicast1=0xe0000001]}]}}, @igmp={0x33, 0x9, 0x0, @multicast1=0xe0000001, "f26e34d645c7822a8c3506dfafeb414f81d3b70a270cf7d48517765989f0a7a25dae850acd51055e2b70bc097db263c039b5544e6377cd175a8dca50213b6096703a9772c4a4bf1c3a17f57d08a473d20ae9a69ac00827a71b46fd322fbd827aec996e736722f6cea49ff1ff31eb4716637e99187a32b14823d46e9e21653223d220976fa48f12ec63c3354f03322fd7be7cf72882705a755a4c785e885a7df30e7747d14e3d01e8d4fd7e"}}}}}, 0x0) listen(r1, 0x1000004000000009) socket$inet(0x2, 0x0, 0x4) syz_extract_tcp_res(&(0x7f0000009000)={0x42424242, 0x42424242}, 0xfffffffffffffffe, 0x9) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000021000-0x12)="266574683123747275737465646c6f5c7d00", 0x3) accept4$unix(r2, &(0x7f0000861000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f000001f000)=0x8, 0x800) gettid() getgid() gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast1=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000f000-0x4)=0xe8) getgid() gettid() 2017/12/02 09:13:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f00006f6000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2017/12/02 09:13:57 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f00009e7000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) r0 = syz_open_dev$vcsn(&(0x7f00008ef000)="2f6465762f7663732300", 0x8, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x7f) 2017/12/02 09:13:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00004a0000-0x1d)="0000000000000000000000000000000000000000000000000000000000", &(0x7f000047c000)=0x1d) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) preadv(r0, &(0x7f0000409000)=[{&(0x7f000061f000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2c}, {&(0x7f00008fe000-0xe8)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8}], 0x2, 0x0) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) memfd_create(&(0x7f00005c1000-0x1)="00", 0x1) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000069b000)="2f6465762f766373612300", 0x7f, 0x298400) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000024000)=0x21, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) openat$cuse(0xffffffffffffff9c, &(0x7f000059c000)="2f6465762f6375736500", 0x101000, 0x0) 2017/12/02 09:13:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = socket(0xa, 0x7, 0x200) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000993000-0x4)=@assoc_id=0x0, &(0x7f0000dd9000)=0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00007e8000-0x8)={r1, 0x8000004}, 0x8) gettid() 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlockall(0x4) iopl(0xa0000000000000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000011e000)="2f6465762f72666b696c6c00", 0x400840, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f000064b000)={0x5, &(0x7f0000ec6000-0x28)=[{0x5, 0x9, 0x1, 0x3}, {0x216a, 0x6, 0x8000, 0x10000}, {0x2cb, 0x59df, 0x2, 0xfffffffffffffffc}, {0xfffffffffffffff9, 0xff, 0x4, 0x7}, {0xffffffffffffff81, 0x6, 0x894dbc, 0x5}]}, 0x8) [ 570.580309] RSP: 002b:00000000f770b08c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 570.587988] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000201ea000 [ 570.595232] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.602472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.609714] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.616955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.624436] __get_request: dev 8:0: request aux data allocation failed, iosched may be disturbed 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000321000-0xe8)={{{@in=@broadcast=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f56000-0x4)=0xe8) stat(&(0x7f00002b6000)="2e2f66696c653000", &(0x7f00001b2000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$mice(&(0x7f0000c91000)="2f6465762f696e7075742f6d69636500", 0x0, 0x40) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000097000)={0x6, &(0x7f00004c1000-0x30)=[{0x7, 0x6, 0xfff, 0x50f}, {0x10001, 0x9, 0x0, 0x5}, {0x20, 0x9, 0x8, 0xb0}, {0x4, 0x8000, 0x800, 0x8001}, {0x7, 0x80000001, 0x3, 0x20}, {0x3, 0xfff, 0x7, 0x1}]}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000e46000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@multicast1=0xe0000001, 0x3, 0x5, 0x3, 0x5, 0x15, 0x0, 0x20, 0x3, r1, r2}, {0x0, 0x2, 0x1a4, 0x61b42462, 0x2, 0x9, 0x1, 0x0}, {0xfffffffffffffffd, 0x10001, 0x3ff, 0x100000001}, 0xffff, 0xffffffffe8292e26, 0xccb, 0x0, 0x6f, 0x3}, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x80, 0xe5a}, 0x5, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x400, 0x1, 0x0, 0x4a8, 0xff, 0x7, 0x2}}, 0xe8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) 2017/12/02 09:13:57 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f00006d6000)=0x0) ptrace$pokeuser(0x6, r0, 0x1, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000af1000)={0x0, 0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000011000)={r1, 0x20}) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000a79000-0x8)="2e2f66696c653000", 0x2000, 0x1c8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000920000)={0x0, 0x1000}, &(0x7f0000c14000)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000519000)={r1, 0x9}, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000fce000)="2f6465762f72746300", 0x12000, 0x0) pipe2(&(0x7f0000d51000)={0x0, 0x0}, 0x880) linkat(r0, &(0x7f0000398000-0x8)="2e2f66696c653000", r1, &(0x7f00006e5000-0x8)="2e2f66696c653000", 0x0) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000c5e000-0x8)="2e2f66696c653000", 0x90) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000eb1000)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2001000000000f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, r0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000df1000-0xcb)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000569000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000b5e000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000295000-0xc)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000e61000)={0x0, r3, 0x2}) r4 = perf_event_open(&(0x7f0000b3a000-0x78)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000dcb000)="000000000000000000000000000000000000000000000000", 0x18) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b36000)={0x101, 0x8, 0x27f3800000000, 0x7, 0x4}, 0x14) mlockall(0x4) 2017/12/02 09:13:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) accept4$inet6(r1, &(0x7f00002b2000)={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f000086e000-0x4)=0x1c, 0x0) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000c2f000)="2f6465762f6175746f667300", 0x80000, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x27, &(0x7f0000302000-0x8)={@empty=0x0, @multicast1=0xe0000001}, 0x8) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 570.672142] kauditd_printk_skb: 29 callbacks suppressed [ 570.672150] audit: type=1326 audit(1512206037.327:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18106 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000386000-0xc)={0x2, r0, 0x1}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) 2017/12/02 09:13:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xd, 0x9, 0x5) connect$nfc_llcp(r0, &(0x7f0000bee000)={0x27, 0x3f, 0x8, 0x7, 0x7abc, 0x2, "feb74c5e8b1d698bcb9a19f32a8f72589779e0b511fbd882cbd294d91d8140a2d51593ac553a1f5b8fd8999c54adce027d500aadcbde4481c576cc44244f82", 0x9}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r1, &(0x7f0000608000)=@ipx={0x4, 0x2, 0xffff, "9d79e65f442e", 0x6, 0x0}, 0x10) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000778000-0x5)="6365706800", &(0x7f0000a81000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000afe000)="8caa847e2e6ed5d0e083cbc43dc326b4b26fa036511ad03ea2dea18f2d4355f9b6405865a36c72e9be3b1c56487fa22bafa8a61d8059616e86058063e878c8c0e628ec00c922c142869c45e08898cc2407142c3cc6d6096c5b8141a5faf55cfd32f0e3acd1c02c4ff417e595dfa888fc505bfec849beaca7020b305ffc34716c5d32834a2d244dd1612c01208f7d019fcf29578494bf16126c3e303d567f17c3a9322b0195a6a0", 0xa7, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) sched_yield() request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:57 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000e56000)={0x0, 0x0, &(0x7f00008c7000/0xf000)=nil}) 2017/12/02 09:13:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x101, 0x0, 0x0}, {0x6, 0x0, 0x7, 0x0}]}) execve(&(0x7f0000934000)="2e2f66696c653000", &(0x7f0000d98000)=[&(0x7f0000297000-0x6)="482a656d3000", &(0x7f0000553000)="00", &(0x7f00009ee000-0x1a)="47504c7070703128766d6e65743121657468306e6f6465762500", &(0x7f000006a000)="00", &(0x7f00005ff000)="00", &(0x7f00009a4000)="73656375726974792423217070703000", &(0x7f0000a97000)="70726f637d4076626f786e657431232d6d696d655f74797065766d6e657431776c616e315e2f6c6f232d7472757374656400", &(0x7f0000dd1000)="65746830706f7369785f61636c5f61636365737373797374656d7b2d7472757374656400", &(0x7f00008a3000-0x1)="00", &(0x7f00001b9000-0xa)="7d7d7472757374656400"], &(0x7f0000bb3000-0x28)=[&(0x7f0000426000-0x11)="706f7369785f61636c5f61636365737300", &(0x7f00006de000)="2970726f632c247b00", &(0x7f0000df6000)="6264657600", &(0x7f00004e6000)="2b00", &(0x7f00006b3000-0xc)="5b272173656c696e75782400", &(0x7f00002c6000)="00", &(0x7f00007f2000-0x1)="00", &(0x7f0000494000-0x2)="2400", &(0x7f0000820000)="7b285d00", &(0x7f0000e3e000-0x2)="2f00"]) gettid() 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000590000-0xc)="2f6465762f72666b696c6c00", 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000c52000)={0x800, {{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, [{{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x1a8) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc396, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f000084a000)=@hdr={0x2, 0x5, 0x4, 0x6, 0x400, 0xcf, @ipv6={0x5, 0x6, "8758e0", 0x3942, 0x84, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[@dstopts={0x2f, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x1, "9e"}, {0x5, 0x40, "d4e2cebfe29918850b74710bc45b9991480f4833ee187fefd36a69ac00bb3129d88b014e2067be1e4aa0dc0f7ac4a46dd5b6f378a299f95ad5f88455fbdad371"}, {0x0, 0x2e, "25c28dd71c32d9751691192e1e556d68e86d8330768ec385f5e777bd49ca71ce612d493ea89a7f9b82d95ed4c021"}, {0x7, 0x15, "ee2f53d74fc01eb50f99b8d91cf05c768d339404b6"}, {0xff, 0xa5, "5d9da3359863d29fcc62179c3ca262682d476098673905693351974f30808e79f1c103ca35c60650656978c0f352ca6e6cdde070e9fc7e9f58e987b82a32a05e29fa8c825ff5425d821c023a10d3a0f018a080c0e2019235fdf7e11380bd1494dc8cdb2bc797f6fc44c6665ab10fa94beb0c6db20b05fbdeac59464612f5070c4979375a944e2ca67c318e0a46ded77210259dbcd12886d32bbc7c1c206c74d193cbc930f3"}]}, @hopopts={0x2b, 0x2a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x56, "a1acfb1a7bbebc27c97686c5ae9f913e94101e08a452464558ef5d91d120a34ba1c3f81e8b21af4062e1c3fc2f61a05ff8508a632840fce1bf058c9955bbc96c325ea0ad72ce194c6f6e63be18da5886b4285680425e"}, {0x1, 0x9a, "295f6fca7fd31aca514aed1df5a4d123e501bc9dfa9d42c672f3f850ec1379a0baac6b5d0408bacc30e1c8744c3bcb6f8a4fc6c490e1f0ce4c24b1ba3cec018ab791cc74bd2085c8a02cd30bdc670a36ca62d83ed751e069a6258a86230bab128760e9d3fb638dca04223a58cddb297631b7166723734874ed92fcd8c638328173bf72a5a82eb5f3ddabaab849a16329c5b9eb96adf69d9fad0e"}, {0xcf, 0x5e, "9a00db9ec4a985d3c02eda8aaf690e436cf9750c8b3cee5e8d7b0a638e0bd122109c03efa9b051b39a7a33706e4d643b894f4b5cf421f71622fe60c9a0e146cf3db0d9bcf4f739df34748459ffe76e4e3f1f670d3212a4a6e4f77a9530f0"}]}, @fragment={0x0, 0x10000, 0xffffffffffff43ce, 0x20, 0x1000, 0x80000000, 0x0}, @dstopts={0x2e, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0xdb, "be3454c8d9813f7b804e682b28e618835ac94701320a0ce1c02a46a0ba30142e6fa9568458676c8feba818096d9ff8aa39d73f8be5d3da7622d5538c3a8b7922ec9d302a941a6a8bb318c12ef3e59e95f7d80c70c613457b8390f06bd2e09dbafe280723f8515fc8acf25974041add596c578ff72fd4aa06c0a06728d5172eec39c5c87295c1ee4c3a1be0e934fb541ab11f057b076ae948a4d38eff6b9a554a5a6a31521c4f2d8241a4c01147e15d89d9462174e2c84db4923f1ecd3e727411996ea3a298dbc052b352244a4f41b5e6a5e1cb6327add060ceae6d"}, {0xc7, 0x5e, "c2f5a60ce827760e3efd219f50fce88d63bfd4197087022ecec4094f6c1f8444654395da14ddba54717347f192f5764b4f58c7f0bcccea41c070090ef29d8174689842bdf9e0ca1a9fdead43c421d6a255898490793cef6e5c95a4d71906"}, {0x1, 0x63, "354ef446e6f6d627f458fc5a75e3ded7eee430b843ab6325d8c8dbbceac400b870927b2264ad11771faed0c324256aa414fd903f67f21b31be37f89e545f302acb4c7ab0360102e79d539377b7fc46191644571bec12bb3d246779699a66c10edc050f"}, {0x7, 0x20, "252fc8fae5cce308e9d601ccf437cfe3c021f1a6da9cfe00a2209dd00f12740c"}]}, @hopopts={0x3e, 0x221, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xcd, 0x1000, "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"}, {0xff, 0x0, ""}, {0x0, 0xe3, "dd86a3cfc4fcd4c36893eba1ebd30230c0aaa02c490967e6269e94ab612402514eb2144e9b1322ccb7ebc5eacfcb2a0b90f4ca1869561f9bddc98cf93f831c1736835d97d01af957b4c23b38f3d253173939bb96eeab04f963651c6a8318aaf05c5247ad07d1e673d316d9e6b5553ea10f293f2216136fa853051a9f633cbc83061377031a5119ccc93a76dcd83ddc573f26fedb413ea8d66002fd27aa5a85c6d1bfd464b6fce38062c1923e8aa154008b6d3de4a5817ac526abaefd8df9f1ccd57ea6c21d2a9781e7855c0aeba437f7424c545d4ed412547cc58749ad5164149a0b37"}, {0xc2, 0x20, "5c2866e7d928b028aa27225fc6a0534403f8a99ade5308581d3e7b087455e1d4"}]}], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0], {0x288, 0x6, "ac6d30", 0x4, 0x8c, 0x3f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}, [@dstopts={0x3e, 0x3c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0xbb, "fba230cc94cf63fc81ffaaab7a56d19bb18625ca16797605fce4458bd659fa8db4db024c4058d92eb0e799f46be8364c0197548aaaf002c26b60623df7c05536900d7c1af1efdca5d0ee58b926840195ff119c84309ad7e7e71a5e5bc42fb17b99207d79585ebdb141b3eec504087222935aa3b4a40f3ad03da1331e1a1f63eb56877c3e333a4449ba1f14f64275d989a5e2e8c1b7a5a5b0ecefc81a6952083f826f20a46597138dbef12f694ec30b8461dc94cd700ebaee8d5a0b"}, {0xc9, 0xd2, "830e16dfbbd1b111f4389bdcd108401323d00ca0d95c479e738c47ffaec0b5f80b446f37befc80452b1ca2dd0ff8fb59ce2a564e42940e8d8bce4c1f6275930cf85bd4e8856c367f2c1a8e0f7b3b6f109393a794bdc07447d907a37970772b94044571c6b6ea7ca7c5a78472d5e0c1e1b4526faeae655b2a7c63fce88f7e0a0203ed5d3e5a761b0e52602a7aa64edff013599a7659750cf3db544cef89417d5849c24cd47702eeef2121d6f4497034aadfff3de8fc7009ae0e94fb9bcdd6efe6f6a9348969f94ddcdf66e055352d8e0c3e5c"}, {0xfe, 0x50, "ce961811938fa552df58c59af582fdf012eda45ba7fadfa0856c474fc01cd95f7ec694204ba78be7236ed2571163ba79fb97f0c9cfe26ef82fbd136cb4c27ee672de5df9fc9fc2fba92c178b7e933ee0"}]}, @hopopts={0x5c, 0x231, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x5, 0xcc, "b8e40f6094e036547202d8de1bb5f6913e276b453637b3f1abe502c8d710f0046ec6d9758f9c6b969684d01c4417e5f00a83d77857ddd27a71cec1f2ea4a013b3973231a2803c80c9946688c6f64476440546af32822c2e44924d2dd427094fdb855dba3fedf8adbf7dcb809db9244262e45bd728df38500c6465adc2fde6f8d624eee07ebd366acac4e44fde885e24b7e40d69fba96a78867830322f07e4a33df7a6cbcb93d42a3d7168a641e1abb76940b7e14c7b6a887bd9c12298fb6ef64895f71dd69184e6eb2d30d23"}, {0xff, 0x4d, "43ca9c926e3ae68ad813e292e2a05bac1ab20f2dbb39f6746df04db1fe7d9efb6920d3d28545a4e36ae4bd312f802da9db4af756c355799475314ff89d1f850fa0a3360d5c40f84ac3014de259"}, {0x7, 0x1000, "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"}, {0xff, 0x44, "35fc6d3c2aaeea4a06708d0a1ce8b75830bcf128d7d3371c1b5c83412c61199333aaf61611804272d5c87d61ddeae3187b0b343b012a43b6e9cef3940cd096c1ac4c57c0"}, {0xc2, 0x24, "8c7fd7fce885d2ae4285e0021a93f1441f1cecc01e05610c939d73ad59d4c4d252cc22c4"}]}, @fragment={0xa9, 0xeb, 0x1000, 0x7, 0x80000000, 0x45e8000, 0x2}], "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"}}}}}, 0x3974) write$tun(r1, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000ec2000-0xb)="636966732e69646d617000", &(0x7f0000378000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00008ac000)="102a1402bc9a858954b05e3b806b4155caf2b4fc2c43e3400b972ca11bee449798b8c83d671c66f309d74e752a26320522c8c901d527dbf58f54f14ba3c0429374ae1d80350af005dabdf23d1f3fc80e5d3d529e95274ba7c75f2f7332eed8c6700e7f7e3d29a2ffe96c31d74c0e92d978040872d0313e80c82f14845647f466c99e87911922f65a9e65a8b115dfb8ce554f85908695ccd6592e6553310fb2eebd56ed391719992e79f8eb4e259a583282b4760979faba9f6ae143c5fa85ac0b3ec729cc4fdb7e963f73e1", 0xcb, 0xfffffffffffffffb) mq_open(&(0x7f0000345000)="7d40736563757269747963707573657400", 0x80, 0x1a0, &(0x7f0000f06000)={0x0, 0x1b2, 0x512, 0x9, 0xffffffffffff7b7b, 0xe8b1, 0x4, 0x9}) request_key(&(0x7f0000815000-0xc)="706b6373375f7465737400b0", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000983000)="5e5e2d73656c696e75782f2e00", r0) [ 570.762099] audit: type=1326 audit(1512206037.415:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18106 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:57 executing program 7: pipe2(&(0x7f0000ba6000-0x8)={0x0, 0x0}, 0x800) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f000095a000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00008ed000-0x6)="2e6465616400", &(0x7f00006d4000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000040000)="863ad73b4b057efa98ab0456cc63ac3cd4b2882050179ecd7dc624e7a6b149833e745e4b5de5ea1d13ed7a747ff3fde998b218199bda8e872868813724a52f9a9e9401caf0e3097e34f727b136d36f5d857d54925df83271ee7a233ddeffc8a2cd8088e733a06e7519362b06b3c40fc41643f79c25ddabe9ceceb6d4d03bc92a3dff80b9e5c018a813bdc563099a4b3b3429cc2d75e503d1fa12fd3014d3692646f0c75ee2956d10692bc078661e721619ff206b97d52d6b8906dacdda98d232f9ced83ae2ad408a6b8ea6837b2351bc9849995deda9172942601341cb99a3b9db5ceb9ab3e7dc5997b56417334bea7bcdb4fe510b3c9c37a7240946c7c7", 0xfe, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000bf5000)="7573657200", &(0x7f0000d4e000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00006ab000-0x4e)="82d54959a42d2e459cec1b94f161da5c6ecccaaaace18b1cf9216ef7da63f5b559127f6608db12404b557553cb10c76c5c057c7a7628286cbf364c3f8d004d36b0e3ff861da95fe444edc930598a", 0x4e, r0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000b69000)=[{&(0x7f0000b56000+0x21)="9f06f459e0a483414334d883555fd524a60a4747570143dca1facc7cd66439e181d23e5b30c7e9bb9f5ccc7128c8df016487720c3dfe0b50f6d64c10a27ee8beca997eba3294f4a223888d82cbf4d8423b83f8b9cb153a2bf61670bf5fd432ebfa182954fabd6bf1f9e688dedb4bbe8b0a2b3d2bfba8b900bc695cd863e9ea0aba7593d377b849cc4b21ca8df9e4d163a73e043a424954b027f6c0b2583a0345c6869cbe4fc156c986d9", 0xaa}, {&(0x7f00005c1000)="b1f85903ce60d4b26e7fa38dde80936987df4e596f06487ad9164e329c5033450acf771e4b3c0979a99813bc1e2f2fb36f23e8ab0eefa1b8e61823c1a41f435e9a3cb05974317dda5e7985bf", 0x4c}, {&(0x7f0000088000)="", 0x0}, {&(0x7f0000399000)="1889c6cba436b1f7adaa3753551515ef9e76b723b179ada686d20b68d6d503e3acca515110967b4b4dc0037cb1afdeac64d187ce07ce699675c81517eb67f0681f071f5f8cd4c1ad718c9378a9e4b5b3a1aac365bd16fa563cd32efd109778e767cbc9f9e0afecd1b877de4e3ba16eb474375be72a3830a8a91e19b7a07b9bb6e9551b74f2ffc37992e3dd150b9c5e7867e9b6cb58e9c7dbe2dc352beb791dc40ead731545b53335b7b501c0fb2ec01f6b5359506475829d965083dcfe0cc8de25ebf665", 0xc4}, {&(0x7f0000dc5000)="62373eb31f953831867959cf34f3b4f94703d03380b897783ea275c589a122012ac66c53fc7e7716e7a8ae760657122fac8a5bb51677e64797da7ee41c94aac6babaf70adf4ba0f612589f0686e4f2821939ddd7d13966ab37c050809f23c4d0c8321eaaa16fa79c8827", 0x6a}, {&(0x7f0000bb9000-0x58)="a4e5756793e5fbc9273186851f120b05ce1ded1f5eb32f1e3023629764dd7e61b466e6741c2c25f9e7792d18c4923ba060841b86ff537419e134479f5e19916da3f7d20f15245c0d1041a983b00a3a952f1b2a56b6abcb92", 0x58}, {&(0x7f00002d3000-0xdb)="bd8d12119d10a9ff3f8101f56c81c0302b025fdb95014026a413da7e6cd2e978a12d4ee009fb7d661fb906f332359b22018dc8d37c7e85b70d844781c3594e06d425fefd35aef7fcece15afb14733ea1989af3fd8146198730df8d38f0fab0c9cf68a89ee8152daac50551dd63ea90a5288e5ee1a4e35f83774b98b6167e0cc39d28134e9a095179e6931bcf28a7d2a2d718388de9b0fb220e43e054cfd40d9ecf53783fec1bc9b890105f83a04bff90e4c1b63e2225c0071678a485aa0b449c6d3cb9eb5af2d12d7747a7f6ee06ce16d52c0cebb93c89321bc46f", 0xdb}, {&(0x7f0000773000)="c1726cecf15b023721e433855836da64df2da67384bef4d1c0df980fb05219a0b05e453316bda713eb9aad96f292b4882f1aa68946f45eb2e0", 0x39}], 0x8, r1) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x80000) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000216000)="2f6465762f6877726e6700", 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000a75000)="2e2f66696c653000", 0x0) mount(&(0x7f0000c32000-0xa)="2e2f636f6e74726f6c00", &(0x7f000047a000)="2e2f636f6e74726f6c00", &(0x7f0000bf8000)="7678667300", 0x2002, &(0x7f00003ca000-0x1000)="") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x9eb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008cf000-0x78)={0x0, 0x78, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00004cd000)={0x5, 0x78, 0x52d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000498000)="2f6465762f7667615f6172626974657200", 0x20000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000811000-0x9)="2f6465762f72746300", 0xfffffffffffffffa, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00002b8000)="2f6465762f736e642f73657100", 0x0, 0x80000) clock_gettime(0x0, &(0x7f0000750000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f000082e000-0x10)={r2, r3+30000000}, &(0x7f00003d7000)={0x0, 0x0}) clock_gettime(0x4000000000000011, &(0x7f000029d000-0x10)={0x0, 0x0}) waitid(0x0, 0x0, &(0x7f00009e4000)={0x0, 0x0, 0x0, 0x0}, 0x80000000, &(0x7f00003bd000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_settime(0x7, &(0x7f0000a70000)={r5, r4+10000000}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f000000d000)={{0x0, 0x0}, {0xe, 0x0}, 0x0, 0x7, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$sg(&(0x7f0000e5c000-0x9)="2f6465762f73672300", 0xe248, 0x40) r6 = add_key$user(&(0x7f0000da2000)="7573657200", &(0x7f0000319000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000476000-0xd2)="a3883dc29d2aff3ac2a99185ec30f7e2454b333d2405f2fe41e43436436d8dd0687c448fe7e1e7c48013ea35c52b38a42dc7660cf99582882451091bf3275c288df48adeeba722c6dfaf91a403c893ee8cb85c0a09d16e26171cf4362e02b4e6db2ab755448e226ce2be67d4456c1be39765202de45d3d5eb40ac7038e7843c29f3f799d0c0346aeb7ae2737d7d74e8ac3b6cd505df43bf561a50adb43ab77ac959a006953ca513d6b50c0e7151f5b0976540d7334d68bb3b51a9c551236e52996ce7bac57c3bd11fd21f3b9dd7013a47c40", 0xd2, 0xffffffffffffffff) keyctl$revoke(0x3, r6) getpgrp(0x0) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000378000-0x19)=@known="73797374656d2e706f7369785f61636c5f64656661756c7400") mlockall(0x4) [ 570.814612] audit: type=1326 audit(1512206037.467:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18147 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:57 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x8, 0x204800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000401000-0xc)={0x0, 0x77fff, 0xffffffffffffff9c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) r4 = memfd_create(&(0x7f0000766000-0x9)="2f6465762f6b01f5", 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000c04000-0x8)={0x0, 0x9}, &(0x7f00008a3000)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000562000-0x8)={0x0, 0x1}, &(0x7f0000592000-0x4)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000552000-0xb8)={r5, 0x7, 0xfffffffffffffffd, 0x8, 0x7f, 0x20, 0x0, 0x8000, {r6, @in6={{0xa, 0x2, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000000, 0x1f, 0x40, 0x1, 0x0}}, &(0x7f00003fa000)=0xb8) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f00001a7000-0xa)="626c61636b6c69737400", &(0x7f0000db9000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000745000-0x1000)="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", 0x1000, 0xfffffffffffffff9) r0 = add_key(&(0x7f00000f7000-0x6)="2e6465616400", &(0x7f0000656000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000b25000)="69645f6c656761637900", &(0x7f0000485000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00008a3000)="2a70726f632e00", r0) r1 = creat(&(0x7f0000d2f000-0x8)="2e2f66696c653000", 0xc1) sendmmsg$nfc_llcp(r1, &(0x7f00006ab000-0x70)=[{&(0x7f0000bf0000)={0x27, 0x4, 0x4, 0x5, 0x8, 0x2, "711db43208c4a30d066ab9bef8f1651d2ec35d1f6fcd4b6491c9ecc5430efc44fbcf11163c95011aa6731a579a5959dd1fbdd45be7edf114d7f90dd2ef3f26", 0x9}, 0x58, &(0x7f0000374000-0x8)=[{&(0x7f0000118000)="446af9fa2bd59ae58b66a962fac6d73842c7c5b3fb2e3f21e89117a09177a6ebbb408ad777483792889c8808dc560c296893644a26bdf9d336ae5211", 0x3c}], 0x1, &(0x7f000092e000-0x68)={0x68, 0x0, 0x48, "604259fdaba91dfae86a381b9c4a05c0fa844b14c70c132e08679973604acee08277a4629446be727e7a5e2c16696f6654d8eadd4d82845bf2c1bd79e401f51124f85bb383861425fd1052c5015b82907d34deb8b0e93d82a6689765"}, 0x68, 0x14}, {&(0x7f0000704000-0x58)={0x27, 0x7, 0x800, 0x6, 0x4, 0x0, "e946e6c9cd0e8032627e9c7062cb3099d85a283d35be41346d39fd031212a43d22284f3da4d88fdfc739f6386f91f695ce53dae36fda312eb722c57f7ab1ca", 0xfff}, 0x58, &(0x7f0000afb000)=[{&(0x7f0000c5e000-0xe4)="4b38a50759c03ff9edf6e9dab04ea9c432b39d1946bb3701ede01af26a033ba3612a4322f1de6a2eb2c221a17029ca3546550cf8abb67a956c42c966f89931ffe84f95b40c4ced1e785a64c8f5850c13b0417cb882a526170045d9c068931dda9a656c16eed773f64d42adf0a121470ca92f5e5eb23413ce4b99c6b30ea62db22352d3ff38c4e2b2b41420bd4fba15305844889ecd8ba60fdea51b90cfca7e667a822dee36297d424b27796ca287fce66161ac7c1e86edf4b6d89c80cbd1118862a9c5a415e329e0be0505fddf41e1832c993b1364904c3e8d0f518caf8e6ccff291c41b", 0xe4}, {&(0x7f00001b4000-0x4c)="677156daf72a13b625c7ff2073de7177398405d8c393379c2fe3d2b714a0ca66b5f834ab3ee1130e95c476270ba38bb7e2af1dbf4bedc001c4b356dcbc52a860fb728dc45c18c21efe9e0ade", 0x4c}, {&(0x7f00009df000)="91b0500e0cad694fe5fc2db6dad63bc392cd34178a4ef8f8afd2232561401f18c423c52dfc41581d4afa4b12d341cfb138b0caaf6236ee74f244e39c5fe1a6f8175e1b1a4258816fab195ab9ab96fd6e8332320e7c0db4730bcb2043f50e12cb666db4fe9b916024e9d24ba09329bae39ce2f887cd14f58d39040affb9ef8a0db360f97b60c08dc3e68dec42cda0b5ea024f2d03491f23aaa50af54dd91ab98884f467df947e5f3c6ee621c9736bc70176ec1113388af78f5ce0b25eb593686deb73a6fb27cf042e7648963432c19b138d5d231b02399da5cc199edd6ed9e7e75ab348af43df3e2f9dd15049d949f8171c57bc4e", 0xf4}, {&(0x7f00009e9000)="7e2bfaf680efda3ac7ba95885315946c5db8b4ede0ddfeabb475d088bd775bc178c02ab11412f59d56b27f4f2f5652b8efcc101b4b1ad0666de8f7e1995b9fd882fc39f3ee3339b473542cd9a659df535c73965f80821622e194626f4f502d2525afc7fb75fdf507b4321a5d12c2c0c0f8ea999d5ad60751738065401849e2ca0fea4ce56dea2276b9bd92ec3a2ae364acfb574167df2b2efa6ca3aabf1e40f7fa5c37db9354c3912f0250561d1f5c6f88bda961f9d709439925c0231c1d2cc714f5ff6f8efb97cbf4528c9565782db9d923fd862e", 0xd5}, {&(0x7f0000649000)="075dd44b22b4643d4d0ccf4166e59ee585c5c8deb388f6fa5ce373d6c6293c3774487ff2a2bfea10dd582ad6a8a68927afe0c5eda1853d6f0b465df246b531f1ce4bad1b14b4e03c292b2664e2d76f47ac6cb7a14a13d6198b", 0x59}, {&(0x7f000037d000)="db38c68de4f4cd7ac39357c8fefa3890b15aa8f9a64cb27b94d4a499ee60c1fd108c174bd84463bd24da79422f7414c672efa10fd89f352a53dc899e373990c33bcbbc69550a7193e31d4cd9bd729a2b17a17ca7993593dd1621be8db41e22d3416920c9daaf1d2848485a38e760f68a4a15affb2b2ec95952b307ced802d7f6c33d7e5d0a912a2890cbb3b774c53e76f898c051844106ff13b588292a71987a", 0xa0}], 0x6, &(0x7f00002a9000-0x70)={0x70, 0x1, 0x30000000, "bac7ea9732afa1a70aedc2ba44b612a22fa5e87283bd7e44d4779cfc5abb911bcbf2a8bb6089e1b38348202c4c94b79d5f39d7544982379c259faecbdeb95b2d189d4fdc925d4b146feac73af23ffa8b4ae60a5d6e64b1b48865774e66fbe98b7ca5cb"}, 0x70, 0x801}, {&(0x7f0000616000)={0x27, 0xfff, 0x8, 0x0, 0x1ff, 0x9, "75d9c8591f2d1fc83c42785e863460aeea7e8d9db02cd6e775ba1aecbfa8c2615ff43997f48ed807140f831602380d15d94f14acc1eed296286e42c623b902", 0xa30bfde}, 0x58, &(0x7f0000f00000)=[{&(0x7f000016d000)="4b5954ee0919af7dccce098b28de9b901fcb51221329690d8d7b17b2f75dd9d99a660b15ea5f9bf6144de8523757685acb6f585e2d1a1a44cc3b6aaed8920e79e52b8e2c0bd9829e41854b74b863f94dc445e20c7b27a6ce4fa53ff4e0513fe810d483757ee1231243b7f841e64332c5b1050d23a53522539fb9c0c612628aece97291f69a98213f2c2e209125805012c4bee6645e0e97fb3c3e77a3325dd3fb986ed37caea765977769bc9fb8fbe01f67412d60a0b2d52817cf7dcd7a87f1c286752191fe9e05efbe02058f0fe9af30ffd14736c7760ef4a9f8cdb2203b48ffe18d2286f4b6bc38912d1e8962bc082962b4b3a2ea7de9030d82ece2223fb9", 0xff}, {&(0x7f000045c000)="541420d74fcfc5f5c8c0bb5d9e8183a8ca92b7e6b65d914557e447f19a915e34405f03267f28a7", 0x27}, {&(0x7f0000383000)="0e2e442137a8ed4f14372129bb57204309e897a0a7875301a5c3c6b5c3878d3aa7ae84e1e013a85ba0197c0fb237c003deee6d72d82fdf1a938d1c378da1a2c32916d4962b070a4d83dc31bcbd07e4beb96437d0fb8222338f5324af2acd2a75841c22339da586e3f971e433335525398548", 0x72}, {&(0x7f000024a000)="34f897fa08bffe507cb7f8f7b52f32f086c4c3fd743c1835b874b1c365fcc55183f3f689d8fa9225419e18d36ca56d89cc29b042ff1a59cfba8d6d35f8ea4fdb864210f3b63d9ce11413722bec9361577d4ea8bd6a89bc37a8d185e55a31b5a372cba80ba48836aa1a87bb48ec001d6e40056f970137401e4292fe306e26583068128c4507", 0x85}, {&(0x7f0000096000-0x99)="5cf2bd287af7f7b4582fbb3ed78a07ab1c441d704c54ae3ee6cd4998fd1e43fd0c62337f4f620e00279ce5614886d993fc9d8dfb8f90752aaaa5a4ee4dc7e0ce3011809b413c6d96ab401395667a3d2a352cbef6c6fd1f9a6c2e69132662af2d11c264eb15c7ee6ffa01fc4238460fa013482e0c2043c86945e59d962da2e97e6754f78b4f01d4d9388cda59fee660513a6e76965344333dbd", 0x99}, {&(0x7f0000cb1000)="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", 0x1000}], 0x6, &(0x7f0000ab5000-0x94)={0x94, 0x115, 0x3, "72c56f857697d39224b0eb66ea83437938ba82fc59a33094a53690c6b0f57d2fc077bc47428768cee6dcde1ec9f01ef63fb453ff563f9d109d2810ccea8880dd6d12221877a0256ab788547ca78d12b0000e36e4ce8153e4f9fba66efb444f3a022e8e3921129c86220625bb02b66d0f61aec1867e572aae05672754cae7e8ee9496fa6e0f"}, 0x94, 0x8005}, {&(0x7f000047b000-0x58)={0x27, 0x10001, 0x8, 0x7, 0x0, 0xb6, "3f0012af50e597719ac2a569685f6c45c73a8c0fbae1641d4f5a27ca0c2552b46aa1b3dfb87e0c7f8edd75460dbddc3ef0a33ef50a2b48d73e5c636131bcc1", 0xfffffffffffffffb}, 0x58, &(0x7f0000e03000-0x10)=[{&(0x7f00005a5000-0x46)="61733a54688f2aa5d79fb493a8e82817307646c35c2fe41e2b8e7eb75d7cbada5988c677ac2d5c7f53bf8ea5060f78ad34f868821e11c7452d1ff9f595455891b008d2e11c17", 0x46}, {&(0x7f000038d000-0x8a)="35facabcc142bfad31a3f428ce18b10583b8f07245b9c77aee50151322dfbd4e32454f3cb4ef982c2ccb5635efc1611860332e7108591a3c6e558b42343fc41b69fc93314857aa2814da1c00a3e7f04b1eabd9cfc61779f79e936b32c78bf5200aa5e49325702b8f22b7aa6c847bde2df3710fa1c996ea3c4a13b392384800d4056a53f967b16d8e2cc8", 0x8a}], 0x2, &(0x7f0000e27000)={0x24, 0x11f, 0x7ff, "a03dd562144f8624abbcb87eafc7e622a5e55752d400d1"}, 0x24, 0x4000001}], 0x4, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00006e6000)="2f6465762f766373612300", 0x1, 0x301041) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f000035f000-0x18)={0xaa, 0x40, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000344000)="2e2f66696c653000", 0x880, 0x1) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000c1000-0xf0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mlockall(0x4) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000022f000-0x5)="7461736b00") getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000a3e000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ed0000-0x4)=0xb) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000aa4000)=0x0) ptrace$peek(0x1, r1, &(0x7f00008fe000-0x4)=0x0) 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) fremovexattr(r0, &(0x7f0000969000-0x36)=@random={"73656375726974792e00", "5e757365722776626f786e657430707070306d696d655f74797065656d307d92a3776c616e30886574683100"}) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000858000/0x4000)=nil, 0x4000) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000180000-0x4)=0x81f, 0x4) mmap(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000858000)="2f6465762f73672300", 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000bbf000-0x8)={0x0, 0x0}) mmap(&(0x7f0000858000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc008641d, &(0x7f0000859000-0x8)={r2, &(0x7f0000e00000-0xe4)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 570.875425] audit: type=1326 audit(1512206037.531:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18147 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x6, 0x5) sendto$llc(r0, &(0x7f0000d27000)="1cfc410ce7c2abb192a5a92f15a356b574ce285b6a9d7cb5b5a73ad73bad285b3c37e63fd281acd15e7eee7fbb5e78606e71d8c07242a5f7bdbdb373f3a9f53c831418ab66711735af3df1a4e52719f8e5a9e26dcef7f0ab92346b1c490cb17252098fde2da3837edeef531b2374ec49cb144ae8db8773b1a0eb93ff1580f4be5cd0348878270721569c1fb6e814027d745dc5c437a3af60673bc4efe343a67dbf4114861596b4a24c4f0e73f3f275a25cd63c980838e41b1cbce1de70f50b87d8dc6034ece1d8eaee4b0899acac10dd717ad96bffacbd9e9d", 0xd9, 0x8000, &(0x7f00004ed000-0x10)={0x1a, 0x16, 0x5, 0x6f, 0x8, 0x10000, @random="55762833701d", [0x0, 0x0]}, 0x10) setsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f000097a000)="cca33cd176ead9fb8e4d97a391068de2bfd4d928fe0522c83010db96de24cf90246b0ae737b027fec90c64d13bb1a87f2dd93b0c0047bb48340cad9c68f51e00584989c0c99f30315b7f6c5fce07368571d7ae9db9399e3d70491300b092486003a7600d7646ae383393678a6a2ae7b2d57b570e95e705533e05db56e6c1932ed403f9b83132d70908266534e46c81c91b54848485026c4e32de216693dec18a9f9115e8f953ff12d01abc5b0d23a166ce898cdd66c13e2d5c6ef1923d33b489b09e7e569ea5fbc375ede388c09e66d67fae848489357be66bcef245fc8d6a73599c4e7c02c85ace0ac4051c859f470bdcc7a32775963d9c638ec50eb73aaacf35c36eedc078f65f99f9bd3ab22d5d273c19dc12c737045b9647789997351b16a7ce1658888d289fe4d13bfa879bed31466ca24fe3c51f5c11f9ead1613479ef2f61b470970b21d7447519945f13a6b1a601789f631f55a5ff84dad6fd4bbdec2cabaee94ae194db745789e5815c63a6dff2271c6befa71caa0c54dacd1022a57088ef4ab78b24886856b142c8fdf6436bc6a8dfdf4b2abdb3eb93342cd41714fd8771cd903774be58c1bd4f09175d9f79f3ad395de69dcb271a0298e281d542516189a25d5a809afe91f669ba45550a25d054676ba0236f213bb21b2c70fece12449d67c82fb33b287f5508dbb12fb7c26710416f776ab6a4475d0e556abb64c7bea5141c811e1579c4c2b1ef9024981a3e5d1b9ad15668da7365bce770cbfa9284396bd5d3770eb4bd63147f0734b3e22ad53393a63bb962b08ae2bfabd3292d72c2197816363c7c7ed7c60b0fa9bf6153c78e9f938491414c3ef786cc087355e2d3ee893d1be3f297276cdd8a2d7cc106d4adee6ca9c5eb50ee670a51ed8712e9d95fcd93ee70290ede8f8c76904f7fab95ef9273d3599515f31938e7fe4e8cf586717e107c863c1f4a623b635a89ecac242a062f74e4076bc26de151776047da01247f0b1ed05f8ea56cc2ca33aabea96f1e8a63aebea0dae7dd2a4d732a0e1e88869943aa2b96876f9688ae391a2396c8236a347ee51a49e5e8e79c3bcf49d8500a956f8a3ad061a26b32f7d089ed549b0cd65aae7a836a5700e5a319d5369995fbc19594cb56befb255b4e464ba91709c2a151b9e3dda7025fa1e97b8d5030a6d8fced75467d67cd0f8207b7b0f0d19937afb5b399cb418c8f00b6dfdf83d041880796f31e8aff87f124e4f3448d31f59a268e98b12a6b30bea2f8a0d44bd75e5c3a170c8e96274b7503f88233f4b538bd24ecefff6a14df3fc40566bfb0341c2dfbb34b17cfaea9522dde98a4500494ea90d4b57c0b17f647adf84f87349a956f0c9b0ae93b905143ca45f856536ff66d142628c8ddb368727ce46fa433adf427a9aeec1615511cb0da2190def0b6fd68d1c4005d162abb9b6ba0c337a29464595adef2d6a7d799ef00453cb5c2f711adf0323ab154d3f985ec073922eb76f6f96756f5ad0c7ad411453bae3ea58b00019be405b50708d92895591c5990467fd2f1548de26232b0dd10d1a13ef56172164f66a31a8eda7523793d6b7f6e96e5b5b9cecb2c5e8ef37c1f254efa1de0ecdb595dffce91efbc6e62f0de86c9c69ccb6e9d9c4d6e8d80afc6d7ac82ff200bf20376d06f3f20090b21d621afa5b6ceb1d45a296b7e42daeb4f6dc4c81377c3bbc080448c640ea5301f3652ed8723f31d28abb7a8133384d3d1da75108d094784dcb661f63a29f75c94b7cd0a402dcec300029752d7bb43f5e90c33ef50c99d869b7c08812c086b5497d96f1dd477277c794d4a3d7d618cf6ffc629afe3c6bf6b89cfc3fa4269447b4077a6848fc31b91b90f039940f940bb4f20b2f8cc5b94805c15149687f457ff5fb865bc5d2e119a44460f9b3d769f61d7cf743fef586ae906703aa72b481b97794ba0ea16456b0785daa1747b3045a71b4ac758d309a2bb1068484e97b58fd91f39fa8593b3dbae71ee29558c8d1517bca93b889dd3883e1d28817af570ed22994265fdb3a6f807df78bc4dd60d308b13d88611803eee7e6788f4f5ad0bd1dba12f4c489855ffca51b49ecf8ceb00ca14127bdf1e7cbe19abc15de21444f126cb72afc0e8ec66829be845f81d869ffb5417ebc1c079eaf3b0ef020266b6fb08fa4fcce4236cf69839e694d730d65b99332f7dc0216861b8512fc9565573a83aef4e4d5d497836cc0694b9fe8a94ad0ec039cef9f3853030b7e2d8e04da96cbca0bfc4e6a5c0823e2f482c29e8a3a43220f09755735b97e25e45a426c6f8120b019a0616d353b2c5c7f946e27ec5371bddb50063e128f25b3ac08cf54874b631af546db2cfca020911061555c96bc6d414ce779f1094b4779276a4305e66b6aa71d902cbce1ca57a92aa0ae3ada54dfdf33a805a5e25bc486d83924b284c31aac97e57f4a765f4a84c32b55283a087f100f0296a2885305928508330be485a62baf39944a5bb472cb7480ecb7094f3b8fd77f4afe1f3de69f86c5884192791c0d176c690788f2abf4eda5b804441a24a75bf17df5ce628b7187d72f8e6d6067acf851d04e31586896408d7dd89d9467a14645fda6791fd1282688af42882f041c68e430e26c24931324e34af9b909e56c9d4ae15af43461dbb38c9583254f83c0b8f0d6bcc9ad81030a983218752ee11d12a4ae9dd93be3b948bf3894bc340789383399026fdb9ac6b3e59ccef882f0551624c390d644b5f1e269c9c49206a268d798ad5ce222ef8bea212e1a7fec88d7ae518f1243806aceacd51352cc93dc649942496a0c92c41220ef80d7b6df44cf590d72bfe4920041095804c081279a72afb76bd1e0434a24751a60fbdd460170bf67c37182df9655438c3043b5db68dfb6275a755dafbbde1b5ba2f9249b3a499588747cf670d914742cf088b161c4379c207b0355bb07a6cb74cffe3e6a01b8d4a643c81a22f324ac1ebeb217bff12ecc42547c6cd1498fbc760a87ac77d4559b150048711b5fa2034509b66969899a695b8d182a6db7f034f10f92f8ded2c6c89502fd42e53293ffaffd895308cde601e889462135fc5cf4e897e1df9d101b1617c2d15572d708e431ea6765c44d0c41648f2fa90a27ba74b508440ee538a1625cffd3065048c3e62c9d8d9b909ca2880fcec45d7fecda531afd0fa64e51a7c4af705be93256601af044081319fa4a06243a6f50153320a25ea49b8cfe78e75a29b8651d27bc619eb820476747fd1f00ec24a54bda78c0f5e1c70aa885baac77bbdd3cd112269417300e27bc3f37c23f14d2fadc30f5ac3fc9553a813071d34a22d303665b4d8cbefe70b473e485b0f268f09f7c9cfe77b598d5b801533fd8ae173063ba4370d04534c79cf0c884fbb1f42c893b1d004d47bb595dc08e10e58bd7514b7aa5df4fd7647f6cf3608bdb1898d34455ab7b83117d788b2dcaba143c0f9f0255f26e22d5a42b2010e3b988ff570a2ef5f8860bfc2f3ba3714b30ea4732bf83540ad5db371a482d8392a5f1a24919c9808753436c184502bc8cbdbf4726ad97f0413925999bafb933bdd789db6da1e03773f91a45b7bf4c8b137f106ed9c500a40607258a7c2346a22f57507007769a87fcb39692bcd29033e01f9b70900e7835a69925a61944939e74fa43fec125d9df953457739807c50700fe90dfb1c4b79cdc820f044499e6622ba3119aa5f4b346a08fc2a71fea5dfa75554518b5ea737f12e23203e5dc8b937a22f5fff89c8e0366219c3bf82dec282b022a843671230a1431847a38340abf94c5bd1606eaa706825c9ab4a752bdc7051950816c50fd6748c027a1d03f903b1ee98666807bfbe39f821aa8e02bc7a7f53944adff9f7b3a559a994105d5951d0ae59a45c44ad9e11c0b1adc36ad310c56596e86a5366caec31b52e359a1980b8a62cfa7d06cceddfcae3e1e318d8f4653c8fda1ae3f07630e8ced5c302f1510d81fc084ee096e0adbc07bda82b0322bead0b9bd7fea8cfad0c099c3204a6e30c082a79b4f545be81280fc309318fae1e02ccee36f2d1f0c36054f47c7902aef014b04c50a2124dcc00d345db8e016d4eb12fd3b430b11eb03121e8ac7675195f79456213d6b265df7e3e823dae075114e16aaa1cd356da039fa38cc3a1fea2b6ffd413f57214d540fb0715ddf72c54b21680fefe90a4102541f0b89356bd6925cb61bc9720bdd8a55b075b0779830f37af7979d96f4364f547fd75f607d1c803cf0eb48ca88da984a92d2449a53a6233de06161a70fc58fb05be28f5ba3a0918831620769e98c082a463cc06bd4cf52b59e9ecf36e2c2c13c1f83d239519e62ffdcc844abcd34ffe90a891c87e3a06041b256f334715d78e0b6f78622b043c4c1dc8302d7397b044e142cb2083306fafe8fd9de48d754ad11481a87e04c5ca8b97a082c855f549305505b0707142b4e5e11b9ee9a1ac53ad3e587a080ff92462c3b82f4b1ed931e9ea9a4db5d67ab31b58314e62fb5a0ccf71d89f1686e8efa1b92157bc7a71502d4817dc0d40f26eb19f0ccf2f41ece29e60ec4b5e7b5d4f0ee4302a5e4ac50f19216b62b7383665bf7a1ced1a3f57af06c97c45b9cf32bab2660e7803a2507ac60e0abcf8d5ca54792577511b9ed92eed9cf1d1a88a5033ae8eaf6785c4e0657dc5b1089e2096ab5bad8b2de585750d4c851f81cfffc0fee4c3c052f4b22c6625346c863fe0109939c447ac7e427078a9a825b8ef22d00ab45dc082b4e1e5269740b833e3363bcaa1e3053383933e83e2fa1078653904e816dbe27ba3b17b5514b5f664c156f92a071a71ba65b8cb2531fe2ac8b261c24f35e2ea6a7e80815a0fb5fc01a60b32b7d16e5f902ef3ed863ef386cd525cb986bc45d2e544a8b9dc34de35e2d1a63407f16da857498e6a35b0823d945610efe28362ec5c71428eb8e272a6c7da5fe8ab003eb8e55b0f6875403a0918d92c5195de04dc30c3cca5372d454bb9f4c121479c1c102b4c5a7d531a699bce5ef67881534e386cc430741929f4b1cec9d5de034a2f8daef829d505a66e7e445f5c8abc76bd6a224da35e1a6954e126fa520ff8ad5d3d9ac1371622ad22aa638e11a913684878d4540bebf522d6cd6f5e298503e8bb74daf3b13ae12c5569aeed1e40534db8037cd21c53c02846c61635b22f304200c7d5e9d0dd8e160df21afada3c2928d49fbc773808cab6da8ff347ec68c76b5b521eb1935710657f2e5f2caa477fd49a9e8c03c5a4326881bfa65182cb696eb9e2b673b9f28bf1b687b3e79671c09e91ef71ad3fd79b8ab532ad0698c4d5c49e00d5fe1e953cf73becaed7d3834a6fb96e030335415160db87bfef53e06ced0f533f2b1ed974a806e4623fddb0c201bd73cda5bdabaa9c3246a90e51652a215f1e68adb0121379163f0f492625ede77a5aebf8be39ee2712d1357c95c1493693aa8462a45265e3e59a9af62d0dc15ebcd5413c11b2dd31b7dfa23858652338df9a93722d3ad89113a875faae5c34929822f99fd416b7a6de5e08cf84ca9c01d8e5e8014729a04647c79516f6b013f40252bb87163603c3839332fa0a7376ed70801efee7b1b172db927e1517f71c242bde06ff96baef511eb212956774e862dace211f4148872c79f925e0556ae14451358667ee0e0740e71a4809e0c179da104c552978640999b47ee50fc8e8fab7ae087e557f78a4f1f43d92b90a8a55b8ce499cf7f1bc7f45e6a9d91ba9da9cb2bff498e8e5fa0e53dde8b60874e4a130a915bd5b10f25b2cd9c79cb9fd33e88c0dbc90aa3c69", 0x1000) mlockall(0x4) 2017/12/02 09:13:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r3 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r4 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) flistxattr(r2, &(0x7f0000ef8000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x50) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00009a6000)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f0000172000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() r0 = memfd_create(&(0x7f0000ec6000-0xb)="65746830656d316c6f2a00", 0x1) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000f80000)={"ef21d040be7e8ec96a38cd8c737defb2", {0x4, 0x200000000, 0x7ff, "00e3a890e6bf", 0x1, 0x0}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000097000)={0x0, @in={{0x2, 0x1, @rand_addr=0xf2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x200, 0x8, 0x3f, 0x3, 0x5, 0xc3, 0xfff, 0x8, 0x2ec, 0x5, 0x100, 0x8, 0x8c3f, 0xfe82, 0x40]}, &(0x7f000092e000-0x4)=0x108) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000ae4000)={r1, 0x3}, &(0x7f00008be000)=0x8) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000098b000)="2f6465762f73657175656e6365723200", 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000dd7000)={0x0, 0x5}, &(0x7f00007f1000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000bbf000-0x6)={r1, 0xdd9a}, 0x6) mlockall(0x4) r2 = socket(0x1, 0xa, 0x4) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00008d9000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000058b000)=0x1000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000f6b000-0x10)={0x5, 0x2, 0xffffffff, 0xfffffffffffffffc, 0x0}, &(0x7f00004b1000)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000eab000-0x8c)={0x0, @in6={{0xa, 0x2, 0xffffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000810000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f000044d000-0xb8)={r3, 0x9, 0x3, 0x2, 0x2330, 0x101, 0x4, 0x3, {r4, @in={{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4000000000000000, 0x20, 0xb2, 0x9, 0x4}}, &(0x7f00006e6000-0x4)=0xb8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000948000-0x8)=@assoc_value={r5, 0x0}, 0x8) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r0, 0x24, &(0x7f00008dd000)={0xe, 0xff, 0xffffffffffffffff, 0x5}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000039f000)={@multicast2=0x0, @broadcast=0x0, @empty=0x0}, &(0x7f0000731000)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000627000)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000b76000)={0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r1, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:57 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004d5000)={0x0, 0x0, &(0x7f0000f38000/0x4000)=nil}) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000df3000-0xb)="2f6465762f6877726e6700", 0x280202, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000a71000-0x4)=0xa20b) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00007a4000)=0x0, &(0x7f0000be0000-0x4)=0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000edd000-0xb)="2f6465762f766373612300", 0x7, 0x80001) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000378000-0x4)=0x0) mlockall(0x1) 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00005dc000)=0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) socketpair(0x15, 0xb, 0x1e6, &(0x7f0000e4f000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000fac000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f00005b0000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) r0 = syz_open_dev$vcsa(&(0x7f000049e000-0xb)="2f6465762f766373612300", 0x6aeb73d2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000037000-0x8c)={0x0, 0x1, 0x6e, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x20, 0x78, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffbff6f3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000c2c000-0xa)="2f6465762f7663732300", 0x5, 0x6000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2017/12/02 09:13:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000090a000)="2f6465762f72746300", 0x4080, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00005f7000-0x4)={r0}) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) [ 571.028696] audit: type=1326 audit(1512206037.659:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18200 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00009b3000)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f0000639000)="2373656375726974796d696d655f747970652d00", 0x14, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000590000-0xc)="2f6465762f72666b696c6c00", 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000c52000)={0x800, {{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, [{{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x1a8) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc396, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f000084a000)=@hdr={0x2, 0x5, 0x4, 0x6, 0x400, 0xcf, @ipv6={0x5, 0x6, "8758e0", 0x3942, 0x84, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[@dstopts={0x2f, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x1, "9e"}, {0x5, 0x40, "d4e2cebfe29918850b74710bc45b9991480f4833ee187fefd36a69ac00bb3129d88b014e2067be1e4aa0dc0f7ac4a46dd5b6f378a299f95ad5f88455fbdad371"}, {0x0, 0x2e, "25c28dd71c32d9751691192e1e556d68e86d8330768ec385f5e777bd49ca71ce612d493ea89a7f9b82d95ed4c021"}, {0x7, 0x15, "ee2f53d74fc01eb50f99b8d91cf05c768d339404b6"}, {0xff, 0xa5, "5d9da3359863d29fcc62179c3ca262682d476098673905693351974f30808e79f1c103ca35c60650656978c0f352ca6e6cdde070e9fc7e9f58e987b82a32a05e29fa8c825ff5425d821c023a10d3a0f018a080c0e2019235fdf7e11380bd1494dc8cdb2bc797f6fc44c6665ab10fa94beb0c6db20b05fbdeac59464612f5070c4979375a944e2ca67c318e0a46ded77210259dbcd12886d32bbc7c1c206c74d193cbc930f3"}]}, @hopopts={0x2b, 0x2a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x56, "a1acfb1a7bbebc27c97686c5ae9f913e94101e08a452464558ef5d91d120a34ba1c3f81e8b21af4062e1c3fc2f61a05ff8508a632840fce1bf058c9955bbc96c325ea0ad72ce194c6f6e63be18da5886b4285680425e"}, {0x1, 0x9a, "295f6fca7fd31aca514aed1df5a4d123e501bc9dfa9d42c672f3f850ec1379a0baac6b5d0408bacc30e1c8744c3bcb6f8a4fc6c490e1f0ce4c24b1ba3cec018ab791cc74bd2085c8a02cd30bdc670a36ca62d83ed751e069a6258a86230bab128760e9d3fb638dca04223a58cddb297631b7166723734874ed92fcd8c638328173bf72a5a82eb5f3ddabaab849a16329c5b9eb96adf69d9fad0e"}, {0xcf, 0x5e, "9a00db9ec4a985d3c02eda8aaf690e436cf9750c8b3cee5e8d7b0a638e0bd122109c03efa9b051b39a7a33706e4d643b894f4b5cf421f71622fe60c9a0e146cf3db0d9bcf4f739df34748459ffe76e4e3f1f670d3212a4a6e4f77a9530f0"}]}, @fragment={0x0, 0x10000, 0xffffffffffff43ce, 0x20, 0x1000, 0x80000000, 0x0}, @dstopts={0x2e, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0xdb, "be3454c8d9813f7b804e682b28e618835ac94701320a0ce1c02a46a0ba30142e6fa9568458676c8feba818096d9ff8aa39d73f8be5d3da7622d5538c3a8b7922ec9d302a941a6a8bb318c12ef3e59e95f7d80c70c613457b8390f06bd2e09dbafe280723f8515fc8acf25974041add596c578ff72fd4aa06c0a06728d5172eec39c5c87295c1ee4c3a1be0e934fb541ab11f057b076ae948a4d38eff6b9a554a5a6a31521c4f2d8241a4c01147e15d89d9462174e2c84db4923f1ecd3e727411996ea3a298dbc052b352244a4f41b5e6a5e1cb6327add060ceae6d"}, {0xc7, 0x5e, "c2f5a60ce827760e3efd219f50fce88d63bfd4197087022ecec4094f6c1f8444654395da14ddba54717347f192f5764b4f58c7f0bcccea41c070090ef29d8174689842bdf9e0ca1a9fdead43c421d6a255898490793cef6e5c95a4d71906"}, {0x1, 0x63, "354ef446e6f6d627f458fc5a75e3ded7eee430b843ab6325d8c8dbbceac400b870927b2264ad11771faed0c324256aa414fd903f67f21b31be37f89e545f302acb4c7ab0360102e79d539377b7fc46191644571bec12bb3d246779699a66c10edc050f"}, {0x7, 0x20, "252fc8fae5cce308e9d601ccf437cfe3c021f1a6da9cfe00a2209dd00f12740c"}]}, @hopopts={0x3e, 0x221, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xcd, 0x1000, "56a0160b5ddcd811fc0c2c02a1c47791ecca24115c6fd97c5774db4ac84d6dfb451edfa386bd35e3106848fe0c74e30b6117bd249ab7193313c429a3b192afffc5071af234504285edbd8076cda305d9ac0e2fd51b910ba235fe24ef9d6cb20cc663e6370c18489678aa1218b3b23af7352b448de638b3574daaf0c2b50b7bbd317e9af0632d401a0c16d0c7062c6cdafbe5c9cb842afe104dab37921cbbcea4063830b41013bd1e6a3038112cf371491dcb78cb82067e5886052a59eda018c7e7aee142af5fda44383cb98109944a952e8dae15ea52fe48d8ef10e40c23faab19768e91a7d826580c03b45a394cc6c71395ccf8667a0427d6b94f890ad4dae7a12a3a6ae99c617711cf07773641e596f5c1895eaf306ad87c9762765c0cf5caae3cf7a753012feac438d165230e6ee2dd0d6b9436c5dc022183dd5a977a1886a43dd810d8ecdb6482547a1048925e132672d77bc0e2bd43e0cd4ea8ea6ee51fac0ad0257c277a3219433c21113cbdaff453c7a50b2688cf98a678d722021f5a7c7a918823c04d9011a21c630aa69e70347dcef3b854ea0d044dd741d1151e0a5b6f4e610e4123dfdb674b1540607fef7aa88dba38a08dfa0dd98ccdb6030c7747f697a32eb855729f6dfc0080e2f814225d91c0199e430bfd7ce81ca7e25c25511951aece5ae47a6a3c9c215c2bd2cb6f3e9cf935bbd6b79873f6d08bf783bf6668f5fd2232c77ed80dba5170a7286e5f58268184ffe0b893fee1c3b45ba95fff8f274b6c8c367a4ba7a45d69e52d1bf97636dd73370919c1c505c69cf3f22e03cfb4463035c67e23bf54ec6c0c8780d2c2ec589166c9af17dfd99cf06380b5b33d7d345798f3ba500cd0ef6d6200d2e9d01c2d9455a4d1a7f48d046e7f3703cdd4f74e62400a9938e1a5844c060e8071399f2b3f3df360553a45cdf5b9a663784e6f0243fad9d8ca85c3a5e4d6eeca188b4569f319e459deff57e882f26c455361e09ad2813605a420f24080f0fb42a28c847edbe20fa31d8f2fb10bfca02a93bc4df5ed5ab95021ce44ee4913bc570b1be5d6d9cd6b3226a1ceb9dd2ad0d803a0f2ac0df3da40e7d08523c3fd41a18bdf337703a18a4d830266a8f2896f0f1d409bd6e15f4419f44c7fea57fef0d8ecaea5129e6bd40f695b8bb081639146918807ddb5998f161d76203f1262ba05c4d0c71bc1345c9d3872485ec147f428aa0d2dd5f4f3deda7e1f5610ddd6f975763d9c2d65c1717051b2832cfb622cae0ee1776f2ec440690a7959b113dc61151139692d133f432c1c153b3dff648cb2bd494977171ba176b4cf4a8d6054cdccd54fca2fe4013dbaa5192eae14caf69ad5e9b1c1916d4cfd9c1b2168253fa161991a06ebc05b51cfac1cf715439f4a77bd3314a73e2973214539f23958aa6dd4a761af0549d767bd9df90f1603671e18c7597df317fcac479971b70f1a5c1a4b81915a2a4d9aede81a749d3b27d07489982382623059132abb8002e78bea9d916cae00b475256a4196dc6926ccb42442f13e5d736d83e63f4b067de8dc532f00842d823d998b50278a1446ac369622216db9cde94d88b234aaf3c3b906e9b55381d18fb1d5d5ab71d85fe30b6b8736f9049e8908ba9c3bbc17f510ec12287d262445beeba638dd012f103ff6a4050b65e4c57f9962dabd66eb7102a74986e55f75aaa2dbdde0cbb9558e6c3bf0e00a810a538421c8d7bb8ec675089b10149ce06bf1164517363ef3f12a208fe85c436f369068692ccbf589b051a1441c5120bcb15c5e54e43189c85b8a06e8f3fe0de5231763f30023b03243619ef4edf23237a40dc3700dfc558b46f05a3a0286a26dac612b2dac839f91090db51e2b221316161ca15e4440fc31b9ea320ee42c15314dbaa4ee0f2e758b10dbcbb23a890c305ed7143640d8b50ce11ac05a13ac2b32a176da8f3074cc38f70f370aa97837ad00a031d18ad8d63636119cb54275f9d2941ca870101aefa0be584a3b0a5c5f22a7aab027748faba518a3a69150a36f0faf2c227484364ffb784f4f52585f0ad035abe140cebe77f6d833cfc3ee3eae906da28097cebbbb49d9ac9f4911e95580bfa681eae339480c4049a204fe3dc2abc1e3614509579f496d4bdc336c497254a89fbe7ca870f7129fec8ea1a8a804de06fad3767086a73d98a617673dc0cbe335ed4647f43edd554b720fb2bee38d072055cf55dd5af9f2a667597f7aa4e83b88b24cec89fd534cae0122f8bd769ad04a2bc4df87b761416aac248ab85100bd92fdbfeec677ec12851ff1ce1958a1d48adbcb2c32ed204e7d9929dab62df8acc3fba027291e5ce6ad954a5eda1d02cfd08203622a9e0291b739f927a0e007658194d11e957b5c867d277e17f02e9f5161041d1daa5acef6ac958c82e57fa3f33d326abcffd55dd90fbefc86e87a80778902952fc981f322e99cedd6ada4923062fc54556c792d93a9bcb70bd147e25a1e48af3b871ff65f025036b42d7c63e7f080ce087ee759cf59ac41803978ae561a2838205666d6e283a193d8278e087988a8d6b1563b3ffdcc04e108474742d537b90f0f1fb0cca4cb540d1fc65bc3f8f8379be68b1c4eeb1dc6f742dcbd131eccf01c79b77e86049e50453e4add324b2ca97fa9111080bdcb71941789c63724d4f6f1c01276a930732314dec04c8f46e24e4cd8288879663fd8d42b61599ba40def294dabc9b065f462b37681ed3418ec72e047a226cfbc7ce947dd53b611551f2683e04d0a076c6148d9b9a0fd5ffd28753b5ef66067b0116def9f2f11b2446918c29b31cb0e55e847c9a5fe1f288018bbd320079fb729348552304ba677264c0a6d65705c1aebecf4f8c167306a8a04cf7023ca32c50e03a8e286579c8c131413f4533ecee3d11ea8fe9adf4348e402fb6906dfce5caf1653658217d61e761b083fa46d118518a96b4ef3f29dc7017cb8a4f24867bc0cee6d580c5c880685db5a7da53e2a65bb37f9fa638b4e11bcbd8a6dc5e9ae9125f02df1eee74ebb3946001ff02fb94e1863e3d8d1d855a96c111b3ee5feefcbf5a282d5d3c24d53b09bb1a32933227a1fce99574ed0499523575adbb24afe165e66165a70ec1cbe7e43b05167fe04673a68a074002f5473a452df154958391d8c8c5316f31142d1ead8f3a26d4c16afe54a3a47a6cd27bd76400a3febb98db2bbea33a6a3c301eff9021b1dfdbf0a316e632dadf310530cf9bb1d2902e0cce297136b0be9f00682cc8e22ec1b7e992971a38f2bc705fb8fc9457ecff4289ca7f2901b2ee71560bbd2e6972a3288d3f1454c03291227a9068072705eac1e9aa52ed561761f3bd5f8e64a2bf42b113ec7bf5d24218588c070f705aa62fc8c97f9bf68787a33dc3aa42ce5f6abc42bbf9114c78406187cf0c744e11cb2752b6eb61a1c45ec20181b2be026212a5d96ca93974ab0a29c2e85464ce837982e46820e97e6c6db330be368611374d39331d103b4aeac55a54e1f67eb27c35963787ec133abfcb7fdc66779479b449f27bf026a90afa031d740a188b33824cccbf5c57deebd1e66a9ff68cccb656a57eab569f3a61d9ea92891f819db6be363c0248ec7ad58aa0b01a922a82c1f3efe760de73944dfec24ace65004aa42c981e37be54a3ade932f5ad8b740f9e1071901bf36f1903a59c12d073de0d48dbab732d23ffc25cb9f3475b99ecf538be0d5ce0838869122ce23de50a65ffdb6ba4ebe5dd64dca673faa792114d3840afafda0ca7069186767135977241ea6284efd8b92886fa7672c061def9a66e34c21c01f87b08760866a39debee01ca799ca1372c553d68204a2bcfe25350b22a665dcd659ac3d4591e12a67811da026ec8139bd42c3f7f3e1a09a3df30a58aeeb47b3881cc697251783ce905370d38b62d92a9d168bf70c138574f42593522465db4e00ed70e54c88146c36f3948b2426401da2e9cbc85abd780f96444f765d8cbc4b62c48cc92f4dccab3b551dc7fb0c348756af2a73c697f6e036eeb83adc9ee437cdfa2acb94752639fc82962d810421f3d28f72f2dcc3e0fd842ef636e3f0abb8763d03ae5f53789244c8c6978b71b4e2b69bebcf99fd2eb713e5d272ee1fa3d6cd588748f05a9207b075b1de1902daee253d7262f934964e28b932f7053e5281855e84cdbbab903f2dc7f61bd954aacedfba2cdf5dc1fd8a74b3b6c767d28df525b18c1234a6262844bf952d10cc0961696e536ba6be0b1406a1264a851c9745647dd3d7be77e8b9162ebb4e3aca9dbcdff7d3e1b36a03a4e7ab7e51faac8c37c068aa2241bcb522a27a6be03a5bfd0a9582fb08cc126348781a5bf69f98fad44f73ec7f7706131d5db6ab3a9e21e520c3e085c0742c05ca72a2cf65623fac5b475819bb2366c9ce20d8776c72016baf2d93771988b2dccf39654f6293eb5b0ba83c82190f7b6d088e7d47d2a1c6536bdc0504b0060a5f793c6770f2b7c9702af09dd52fae8621da9e63e97db4b8a18651b3a2c227848aeddf67b5aac0211cdbae5c2f029d53f5c355669a0785c0f68553c55baa985adf05f9cc9749a6b92979d61741be022be5dbda1a13b37d22214b52fcfe577973509f4959931a370bc9aa2cd9d76cd30dd1658b2bc0cd72d31923d8ecec7b3feb7e05a8b1959e9a5c8bbd43907f34681ea3e262c7c826eac4bffffc133f2c27e478b447d8858e87a038d46341c04199ad3ccbca96ba81e220d1b716126ae06117a05111680f5926e5d56e3c8978abd7f8fa961de2765ac73c694a72d25026cea9dabdf3b42a9cd14d4f6c9d9e79c3a29d1f13c3cef07388d408fef57404ddd7888a034ddef3a55e5e11b52f68cf34fed3b69bcf592e6bffeb50c7da1a119bc6a46757c9569ec51c99f06e807c7e36374ebd876f769536aee114ef6a214e0bc67d507af14c9d7df730786dc25673bbfe10ed24cebf6422bb5b9ce015c2e6dabb30e3f8c1ad8d01d320f8efa4da45efb20c7a0014fb37ac1c11f9efe79e3cd1a0695bfa1fbe22c60bc5559e815cbaa827d02aaccd9ecd6ef2452a6a77706fdcf665a81895188f2ff877b9e5b0892573d34d0cbd73dd05965a9002a142b7ad66ffa5c1426cf1e0409e7a663634e9e9295849d0b77fccb64924c4a2b466106a2b15db9ce2419c34700654732ab21df592e283cb7d375f9565f7cf58e5ee99a645d606e5982d1fc5900b83a85771e2f47be3eba6e8baf81892c6447ed496b5294360049d283e9ebe91aaab47981ff4d535029072882f40c210c788491d02f89607e9131ef7ecbed828210aedbd2bed3a5e873386def7391f3f444b9c5572c7077ac55d89298c3eb21beb2b858c7eeaf29561dc0a815caa2a41ba74a749a2469c6c733cf95a68caa6f7cd38eda84b16a0d924962db161b9c5a786014aa864dc06530307d6247964e873281cbf0181b82f7108db418333a9cc0c511ac30ce1afe19fe723ed561606f73da1233a2e7a1a248074d10a4d6d2dbe5214b79d3e2221652914d74f7869146a51a6af81e644e544d24ab9bdfeaa0ac31e35c654703df1491c765b371356bced1c0530a4bc26afda40f312d1b02ee8a0a7b0dd3abe69dcc25692843cb750c9523f789cb3bb5e0e60003b5b9aba0bb5f886cd14f5b96b701aa3dfdd4d663c5adc945e17f4e6bc7bbc38a40927e1c6dd3261fc2a08e23230ca12e61137d3bdebdf7d9e5500ccbe41fb064d7cf95883bba9b1073cf260a69085b93ac934d3d8fa7047dbaae327c6217dd3ba31c369d1fe0154d9e22757c99a22665775111ffeff37bcd8"}, {0xff, 0x0, ""}, {0x0, 0xe3, "dd86a3cfc4fcd4c36893eba1ebd30230c0aaa02c490967e6269e94ab612402514eb2144e9b1322ccb7ebc5eacfcb2a0b90f4ca1869561f9bddc98cf93f831c1736835d97d01af957b4c23b38f3d253173939bb96eeab04f963651c6a8318aaf05c5247ad07d1e673d316d9e6b5553ea10f293f2216136fa853051a9f633cbc83061377031a5119ccc93a76dcd83ddc573f26fedb413ea8d66002fd27aa5a85c6d1bfd464b6fce38062c1923e8aa154008b6d3de4a5817ac526abaefd8df9f1ccd57ea6c21d2a9781e7855c0aeba437f7424c545d4ed412547cc58749ad5164149a0b37"}, {0xc2, 0x20, "5c2866e7d928b028aa27225fc6a0534403f8a99ade5308581d3e7b087455e1d4"}]}], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0], {0x288, 0x6, "ac6d30", 0x4, 0x8c, 0x3f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}, [@dstopts={0x3e, 0x3c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0xbb, "fba230cc94cf63fc81ffaaab7a56d19bb18625ca16797605fce4458bd659fa8db4db024c4058d92eb0e799f46be8364c0197548aaaf002c26b60623df7c05536900d7c1af1efdca5d0ee58b926840195ff119c84309ad7e7e71a5e5bc42fb17b99207d79585ebdb141b3eec504087222935aa3b4a40f3ad03da1331e1a1f63eb56877c3e333a4449ba1f14f64275d989a5e2e8c1b7a5a5b0ecefc81a6952083f826f20a46597138dbef12f694ec30b8461dc94cd700ebaee8d5a0b"}, {0xc9, 0xd2, "830e16dfbbd1b111f4389bdcd108401323d00ca0d95c479e738c47ffaec0b5f80b446f37befc80452b1ca2dd0ff8fb59ce2a564e42940e8d8bce4c1f6275930cf85bd4e8856c367f2c1a8e0f7b3b6f109393a794bdc07447d907a37970772b94044571c6b6ea7ca7c5a78472d5e0c1e1b4526faeae655b2a7c63fce88f7e0a0203ed5d3e5a761b0e52602a7aa64edff013599a7659750cf3db544cef89417d5849c24cd47702eeef2121d6f4497034aadfff3de8fc7009ae0e94fb9bcdd6efe6f6a9348969f94ddcdf66e055352d8e0c3e5c"}, {0xfe, 0x50, "ce961811938fa552df58c59af582fdf012eda45ba7fadfa0856c474fc01cd95f7ec694204ba78be7236ed2571163ba79fb97f0c9cfe26ef82fbd136cb4c27ee672de5df9fc9fc2fba92c178b7e933ee0"}]}, @hopopts={0x5c, 0x231, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x5, 0xcc, "b8e40f6094e036547202d8de1bb5f6913e276b453637b3f1abe502c8d710f0046ec6d9758f9c6b969684d01c4417e5f00a83d77857ddd27a71cec1f2ea4a013b3973231a2803c80c9946688c6f64476440546af32822c2e44924d2dd427094fdb855dba3fedf8adbf7dcb809db9244262e45bd728df38500c6465adc2fde6f8d624eee07ebd366acac4e44fde885e24b7e40d69fba96a78867830322f07e4a33df7a6cbcb93d42a3d7168a641e1abb76940b7e14c7b6a887bd9c12298fb6ef64895f71dd69184e6eb2d30d23"}, {0xff, 0x4d, "43ca9c926e3ae68ad813e292e2a05bac1ab20f2dbb39f6746df04db1fe7d9efb6920d3d28545a4e36ae4bd312f802da9db4af756c355799475314ff89d1f850fa0a3360d5c40f84ac3014de259"}, {0x7, 0x1000, "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"}, {0xff, 0x44, "35fc6d3c2aaeea4a06708d0a1ce8b75830bcf128d7d3371c1b5c83412c61199333aaf61611804272d5c87d61ddeae3187b0b343b012a43b6e9cef3940cd096c1ac4c57c0"}, {0xc2, 0x24, "8c7fd7fce885d2ae4285e0021a93f1441f1cecc01e05610c939d73ad59d4c4d252cc22c4"}]}, @fragment={0xa9, 0xeb, 0x1000, 0x7, 0x80000000, 0x45e8000, 0x2}], "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"}}}}}, 0x3974) write$tun(r1, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)="2e2f66696c653000", 0x8000, 0x103) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000b17000)={0x0, 0x3}, &(0x7f0000096000-0x1)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000068b000-0x8)={r1, 0xea5}, &(0x7f000038d000-0x4)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x0, &(0x7f000026d000)=[]}) gettid() socketpair(0x2, 0x5, 0x80000001, &(0x7f00003f5000-0x8)={0x0, 0x0}) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000560000-0x2)={0x5, 0x9}, 0x2) r3 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000b31000)={0x0, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00006be000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000249000)={r4, @in6={{0xa, 0x3, 0x68, @loopback={0x0, 0x1}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x9, 0x8003, 0x0, 0x75, 0xb88, 0x100, 0xe36, 0x6, 0x8, 0x9, 0x100, 0x2, 0x6, 0x9, 0x5]}, &(0x7f0000f32000)=0x108) 2017/12/02 09:13:57 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000b76000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x14) connect(r0, &(0x7f0000d17000-0x10)=@ethernet={0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00008ed000)="2e2f66696c653000", 0x101400, 0x2) ioctl$TIOCCBRK(r0, 0x5428) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:57 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000c42000)="2f6465762f6b766d00", 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000f8b000-0x9)="2f6465762f73672300", 0x9, 0x181000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0xa4, &(0x7f0000001000-0xa4)=[@in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x10000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100}, @in6={0xa, 0x3, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xb35}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000003000-0x4)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000002000-0x15)={r3, 0xd, "c0587199a12a7deeb0dce29d5c"}, &(0x7f0000001000-0x4)=0x15) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x1ff, 0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) [ 571.080665] audit: type=1326 audit(1512206037.736:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18200 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) renameat2(r0, &(0x7f0000f67000-0xa)="2e2f636f6e74726f6c00", r0, &(0x7f0000694000)="2e2f636f6e74726f6c00", 0x4) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f000067c000-0xc)={0x10200, 0x0, &(0x7f0000eb2000/0x3000)=nil}) syz_open_dev$loop(&(0x7f0000045000-0xb)="2f6465762f6c6f6f702300", 0x4, 0x10000) write$fuse(r0, &(0x7f0000380000)={0x50, 0x0, 0x3, @fuse_init_out={0x7, 0x1a, 0x3ff, 0x3, 0xd2d4, 0x3f, 0x5, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x50) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000c82000)=0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3) accept4$unix(r0, 0x0, &(0x7f0000d7f000-0x4)=0x0, 0x80800) 2017/12/02 09:13:57 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000590000-0xc)="2f6465762f72666b696c6c00", 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000c52000)={0x800, {{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, [{{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x1a8) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc396, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f000084a000)=@hdr={0x2, 0x5, 0x4, 0x6, 0x400, 0xcf, @ipv6={0x5, 0x6, "8758e0", 0x3942, 0x84, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, {[@dstopts={0x2f, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x1, "9e"}, {0x5, 0x40, "d4e2cebfe29918850b74710bc45b9991480f4833ee187fefd36a69ac00bb3129d88b014e2067be1e4aa0dc0f7ac4a46dd5b6f378a299f95ad5f88455fbdad371"}, {0x0, 0x2e, "25c28dd71c32d9751691192e1e556d68e86d8330768ec385f5e777bd49ca71ce612d493ea89a7f9b82d95ed4c021"}, {0x7, 0x15, "ee2f53d74fc01eb50f99b8d91cf05c768d339404b6"}, {0xff, 0xa5, "5d9da3359863d29fcc62179c3ca262682d476098673905693351974f30808e79f1c103ca35c60650656978c0f352ca6e6cdde070e9fc7e9f58e987b82a32a05e29fa8c825ff5425d821c023a10d3a0f018a080c0e2019235fdf7e11380bd1494dc8cdb2bc797f6fc44c6665ab10fa94beb0c6db20b05fbdeac59464612f5070c4979375a944e2ca67c318e0a46ded77210259dbcd12886d32bbc7c1c206c74d193cbc930f3"}]}, @hopopts={0x2b, 0x2a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0x56, "a1acfb1a7bbebc27c97686c5ae9f913e94101e08a452464558ef5d91d120a34ba1c3f81e8b21af4062e1c3fc2f61a05ff8508a632840fce1bf058c9955bbc96c325ea0ad72ce194c6f6e63be18da5886b4285680425e"}, {0x1, 0x9a, "295f6fca7fd31aca514aed1df5a4d123e501bc9dfa9d42c672f3f850ec1379a0baac6b5d0408bacc30e1c8744c3bcb6f8a4fc6c490e1f0ce4c24b1ba3cec018ab791cc74bd2085c8a02cd30bdc670a36ca62d83ed751e069a6258a86230bab128760e9d3fb638dca04223a58cddb297631b7166723734874ed92fcd8c638328173bf72a5a82eb5f3ddabaab849a16329c5b9eb96adf69d9fad0e"}, {0xcf, 0x5e, "9a00db9ec4a985d3c02eda8aaf690e436cf9750c8b3cee5e8d7b0a638e0bd122109c03efa9b051b39a7a33706e4d643b894f4b5cf421f71622fe60c9a0e146cf3db0d9bcf4f739df34748459ffe76e4e3f1f670d3212a4a6e4f77a9530f0"}]}, @fragment={0x0, 0x10000, 0xffffffffffff43ce, 0x20, 0x1000, 0x80000000, 0x0}, @dstopts={0x2e, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0xdb, "be3454c8d9813f7b804e682b28e618835ac94701320a0ce1c02a46a0ba30142e6fa9568458676c8feba818096d9ff8aa39d73f8be5d3da7622d5538c3a8b7922ec9d302a941a6a8bb318c12ef3e59e95f7d80c70c613457b8390f06bd2e09dbafe280723f8515fc8acf25974041add596c578ff72fd4aa06c0a06728d5172eec39c5c87295c1ee4c3a1be0e934fb541ab11f057b076ae948a4d38eff6b9a554a5a6a31521c4f2d8241a4c01147e15d89d9462174e2c84db4923f1ecd3e727411996ea3a298dbc052b352244a4f41b5e6a5e1cb6327add060ceae6d"}, {0xc7, 0x5e, "c2f5a60ce827760e3efd219f50fce88d63bfd4197087022ecec4094f6c1f8444654395da14ddba54717347f192f5764b4f58c7f0bcccea41c070090ef29d8174689842bdf9e0ca1a9fdead43c421d6a255898490793cef6e5c95a4d71906"}, {0x1, 0x63, "354ef446e6f6d627f458fc5a75e3ded7eee430b843ab6325d8c8dbbceac400b870927b2264ad11771faed0c324256aa414fd903f67f21b31be37f89e545f302acb4c7ab0360102e79d539377b7fc46191644571bec12bb3d246779699a66c10edc050f"}, {0x7, 0x20, "252fc8fae5cce308e9d601ccf437cfe3c021f1a6da9cfe00a2209dd00f12740c"}]}, @hopopts={0x3e, 0x221, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xcd, 0x1000, "56a0160b5ddcd811fc0c2c02a1c47791ecca24115c6fd97c5774db4ac84d6dfb451edfa386bd35e3106848fe0c74e30b6117bd249ab7193313c429a3b192afffc5071af234504285edbd8076cda305d9ac0e2fd51b910ba235fe24ef9d6cb20cc663e6370c18489678aa1218b3b23af7352b448de638b3574daaf0c2b50b7bbd317e9af0632d401a0c16d0c7062c6cdafbe5c9cb842afe104dab37921cbbcea4063830b41013bd1e6a3038112cf371491dcb78cb82067e5886052a59eda018c7e7aee142af5fda44383cb98109944a952e8dae15ea52fe48d8ef10e40c23faab19768e91a7d826580c03b45a394cc6c71395ccf8667a0427d6b94f890ad4dae7a12a3a6ae99c617711cf07773641e596f5c1895eaf306ad87c9762765c0cf5caae3cf7a753012feac438d165230e6ee2dd0d6b9436c5dc022183dd5a977a1886a43dd810d8ecdb6482547a1048925e132672d77bc0e2bd43e0cd4ea8ea6ee51fac0ad0257c277a3219433c21113cbdaff453c7a50b2688cf98a678d722021f5a7c7a918823c04d9011a21c630aa69e70347dcef3b854ea0d044dd741d1151e0a5b6f4e610e4123dfdb674b1540607fef7aa88dba38a08dfa0dd98ccdb6030c7747f697a32eb855729f6dfc0080e2f814225d91c0199e430bfd7ce81ca7e25c25511951aece5ae47a6a3c9c215c2bd2cb6f3e9cf935bbd6b79873f6d08bf783bf6668f5fd2232c77ed80dba5170a7286e5f58268184ffe0b893fee1c3b45ba95fff8f274b6c8c367a4ba7a45d69e52d1bf97636dd73370919c1c505c69cf3f22e03cfb4463035c67e23bf54ec6c0c8780d2c2ec589166c9af17dfd99cf06380b5b33d7d345798f3ba500cd0ef6d6200d2e9d01c2d9455a4d1a7f48d046e7f3703cdd4f74e62400a9938e1a5844c060e8071399f2b3f3df360553a45cdf5b9a663784e6f0243fad9d8ca85c3a5e4d6eeca188b4569f319e459deff57e882f26c455361e09ad2813605a420f24080f0fb42a28c847edbe20fa31d8f2fb10bfca02a93bc4df5ed5ab95021ce44ee4913bc570b1be5d6d9cd6b3226a1ceb9dd2ad0d803a0f2ac0df3da40e7d08523c3fd41a18bdf337703a18a4d830266a8f2896f0f1d409bd6e15f4419f44c7fea57fef0d8ecaea5129e6bd40f695b8bb081639146918807ddb5998f161d76203f1262ba05c4d0c71bc1345c9d3872485ec147f428aa0d2dd5f4f3deda7e1f5610ddd6f975763d9c2d65c1717051b2832cfb622cae0ee1776f2ec440690a7959b113dc61151139692d133f432c1c153b3dff648cb2bd494977171ba176b4cf4a8d6054cdccd54fca2fe4013dbaa5192eae14caf69ad5e9b1c1916d4cfd9c1b2168253fa161991a06ebc05b51cfac1cf715439f4a77bd3314a73e2973214539f23958aa6dd4a761af0549d767bd9df90f1603671e18c7597df317fcac479971b70f1a5c1a4b81915a2a4d9aede81a749d3b27d07489982382623059132abb8002e78bea9d916cae00b475256a4196dc6926ccb42442f13e5d736d83e63f4b067de8dc532f00842d823d998b50278a1446ac369622216db9cde94d88b234aaf3c3b906e9b55381d18fb1d5d5ab71d85fe30b6b8736f9049e8908ba9c3bbc17f510ec12287d262445beeba638dd012f103ff6a4050b65e4c57f9962dabd66eb7102a74986e55f75aaa2dbdde0cbb9558e6c3bf0e00a810a538421c8d7bb8ec675089b10149ce06bf1164517363ef3f12a208fe85c436f369068692ccbf589b051a1441c5120bcb15c5e54e43189c85b8a06e8f3fe0de5231763f30023b03243619ef4edf23237a40dc3700dfc558b46f05a3a0286a26dac612b2dac839f91090db51e2b221316161ca15e4440fc31b9ea320ee42c15314dbaa4ee0f2e758b10dbcbb23a890c305ed7143640d8b50ce11ac05a13ac2b32a176da8f3074cc38f70f370aa97837ad00a031d18ad8d63636119cb54275f9d2941ca870101aefa0be584a3b0a5c5f22a7aab027748faba518a3a69150a36f0faf2c227484364ffb784f4f52585f0ad035abe140cebe77f6d833cfc3ee3eae906da28097cebbbb49d9ac9f4911e95580bfa681eae339480c4049a204fe3dc2abc1e3614509579f496d4bdc336c497254a89fbe7ca870f7129fec8ea1a8a804de06fad3767086a73d98a617673dc0cbe335ed4647f43edd554b720fb2bee38d072055cf55dd5af9f2a667597f7aa4e83b88b24cec89fd534cae0122f8bd769ad04a2bc4df87b761416aac248ab85100bd92fdbfeec677ec12851ff1ce1958a1d48adbcb2c32ed204e7d9929dab62df8acc3fba027291e5ce6ad954a5eda1d02cfd08203622a9e0291b739f927a0e007658194d11e957b5c867d277e17f02e9f5161041d1daa5acef6ac958c82e57fa3f33d326abcffd55dd90fbefc86e87a80778902952fc981f322e99cedd6ada4923062fc54556c792d93a9bcb70bd147e25a1e48af3b871ff65f025036b42d7c63e7f080ce087ee759cf59ac41803978ae561a2838205666d6e283a193d8278e087988a8d6b1563b3ffdcc04e108474742d537b90f0f1fb0cca4cb540d1fc65bc3f8f8379be68b1c4eeb1dc6f742dcbd131eccf01c79b77e86049e50453e4add324b2ca97fa9111080bdcb71941789c63724d4f6f1c01276a930732314dec04c8f46e24e4cd8288879663fd8d42b61599ba40def294dabc9b065f462b37681ed3418ec72e047a226cfbc7ce947dd53b611551f2683e04d0a076c6148d9b9a0fd5ffd28753b5ef66067b0116def9f2f11b2446918c29b31cb0e55e847c9a5fe1f288018bbd320079fb729348552304ba677264c0a6d65705c1aebecf4f8c167306a8a04cf7023ca32c50e03a8e286579c8c131413f4533ecee3d11ea8fe9adf4348e402fb6906dfce5caf1653658217d61e761b083fa46d118518a96b4ef3f29dc7017cb8a4f24867bc0cee6d580c5c880685db5a7da53e2a65bb37f9fa638b4e11bcbd8a6dc5e9ae9125f02df1eee74ebb3946001ff02fb94e1863e3d8d1d855a96c111b3ee5feefcbf5a282d5d3c24d53b09bb1a32933227a1fce99574ed0499523575adbb24afe165e66165a70ec1cbe7e43b05167fe04673a68a074002f5473a452df154958391d8c8c5316f31142d1ead8f3a26d4c16afe54a3a47a6cd27bd76400a3febb98db2bbea33a6a3c301eff9021b1dfdbf0a316e632dadf310530cf9bb1d2902e0cce297136b0be9f00682cc8e22ec1b7e992971a38f2bc705fb8fc9457ecff4289ca7f2901b2ee71560bbd2e6972a3288d3f1454c03291227a9068072705eac1e9aa52ed561761f3bd5f8e64a2bf42b113ec7bf5d24218588c070f705aa62fc8c97f9bf68787a33dc3aa42ce5f6abc42bbf9114c78406187cf0c744e11cb2752b6eb61a1c45ec20181b2be026212a5d96ca93974ab0a29c2e85464ce837982e46820e97e6c6db330be368611374d39331d103b4aeac55a54e1f67eb27c35963787ec133abfcb7fdc66779479b449f27bf026a90afa031d740a188b33824cccbf5c57deebd1e66a9ff68cccb656a57eab569f3a61d9ea92891f819db6be363c0248ec7ad58aa0b01a922a82c1f3efe760de73944dfec24ace65004aa42c981e37be54a3ade932f5ad8b740f9e1071901bf36f1903a59c12d073de0d48dbab732d23ffc25cb9f3475b99ecf538be0d5ce0838869122ce23de50a65ffdb6ba4ebe5dd64dca673faa792114d3840afafda0ca7069186767135977241ea6284efd8b92886fa7672c061def9a66e34c21c01f87b08760866a39debee01ca799ca1372c553d68204a2bcfe25350b22a665dcd659ac3d4591e12a67811da026ec8139bd42c3f7f3e1a09a3df30a58aeeb47b3881cc697251783ce905370d38b62d92a9d168bf70c138574f42593522465db4e00ed70e54c88146c36f3948b2426401da2e9cbc85abd780f96444f765d8cbc4b62c48cc92f4dccab3b551dc7fb0c348756af2a73c697f6e036eeb83adc9ee437cdfa2acb94752639fc82962d810421f3d28f72f2dcc3e0fd842ef636e3f0abb8763d03ae5f53789244c8c6978b71b4e2b69bebcf99fd2eb713e5d272ee1fa3d6cd588748f05a9207b075b1de1902daee253d7262f934964e28b932f7053e5281855e84cdbbab903f2dc7f61bd954aacedfba2cdf5dc1fd8a74b3b6c767d28df525b18c1234a6262844bf952d10cc0961696e536ba6be0b1406a1264a851c9745647dd3d7be77e8b9162ebb4e3aca9dbcdff7d3e1b36a03a4e7ab7e51faac8c37c068aa2241bcb522a27a6be03a5bfd0a9582fb08cc126348781a5bf69f98fad44f73ec7f7706131d5db6ab3a9e21e520c3e085c0742c05ca72a2cf65623fac5b475819bb2366c9ce20d8776c72016baf2d93771988b2dccf39654f6293eb5b0ba83c82190f7b6d088e7d47d2a1c6536bdc0504b0060a5f793c6770f2b7c9702af09dd52fae8621da9e63e97db4b8a18651b3a2c227848aeddf67b5aac0211cdbae5c2f029d53f5c355669a0785c0f68553c55baa985adf05f9cc9749a6b92979d61741be022be5dbda1a13b37d22214b52fcfe577973509f4959931a370bc9aa2cd9d76cd30dd1658b2bc0cd72d31923d8ecec7b3feb7e05a8b1959e9a5c8bbd43907f34681ea3e262c7c826eac4bffffc133f2c27e478b447d8858e87a038d46341c04199ad3ccbca96ba81e220d1b716126ae06117a05111680f5926e5d56e3c8978abd7f8fa961de2765ac73c694a72d25026cea9dabdf3b42a9cd14d4f6c9d9e79c3a29d1f13c3cef07388d408fef57404ddd7888a034ddef3a55e5e11b52f68cf34fed3b69bcf592e6bffeb50c7da1a119bc6a46757c9569ec51c99f06e807c7e36374ebd876f769536aee114ef6a214e0bc67d507af14c9d7df730786dc25673bbfe10ed24cebf6422bb5b9ce015c2e6dabb30e3f8c1ad8d01d320f8efa4da45efb20c7a0014fb37ac1c11f9efe79e3cd1a0695bfa1fbe22c60bc5559e815cbaa827d02aaccd9ecd6ef2452a6a77706fdcf665a81895188f2ff877b9e5b0892573d34d0cbd73dd05965a9002a142b7ad66ffa5c1426cf1e0409e7a663634e9e9295849d0b77fccb64924c4a2b466106a2b15db9ce2419c34700654732ab21df592e283cb7d375f9565f7cf58e5ee99a645d606e5982d1fc5900b83a85771e2f47be3eba6e8baf81892c6447ed496b5294360049d283e9ebe91aaab47981ff4d535029072882f40c210c788491d02f89607e9131ef7ecbed828210aedbd2bed3a5e873386def7391f3f444b9c5572c7077ac55d89298c3eb21beb2b858c7eeaf29561dc0a815caa2a41ba74a749a2469c6c733cf95a68caa6f7cd38eda84b16a0d924962db161b9c5a786014aa864dc06530307d6247964e873281cbf0181b82f7108db418333a9cc0c511ac30ce1afe19fe723ed561606f73da1233a2e7a1a248074d10a4d6d2dbe5214b79d3e2221652914d74f7869146a51a6af81e644e544d24ab9bdfeaa0ac31e35c654703df1491c765b371356bced1c0530a4bc26afda40f312d1b02ee8a0a7b0dd3abe69dcc25692843cb750c9523f789cb3bb5e0e60003b5b9aba0bb5f886cd14f5b96b701aa3dfdd4d663c5adc945e17f4e6bc7bbc38a40927e1c6dd3261fc2a08e23230ca12e61137d3bdebdf7d9e5500ccbe41fb064d7cf95883bba9b1073cf260a69085b93ac934d3d8fa7047dbaae327c6217dd3ba31c369d1fe0154d9e22757c99a22665775111ffeff37bcd8"}, {0xff, 0x0, ""}, {0x0, 0xe3, "dd86a3cfc4fcd4c36893eba1ebd30230c0aaa02c490967e6269e94ab612402514eb2144e9b1322ccb7ebc5eacfcb2a0b90f4ca1869561f9bddc98cf93f831c1736835d97d01af957b4c23b38f3d253173939bb96eeab04f963651c6a8318aaf05c5247ad07d1e673d316d9e6b5553ea10f293f2216136fa853051a9f633cbc83061377031a5119ccc93a76dcd83ddc573f26fedb413ea8d66002fd27aa5a85c6d1bfd464b6fce38062c1923e8aa154008b6d3de4a5817ac526abaefd8df9f1ccd57ea6c21d2a9781e7855c0aeba437f7424c545d4ed412547cc58749ad5164149a0b37"}, {0xc2, 0x20, "5c2866e7d928b028aa27225fc6a0534403f8a99ade5308581d3e7b087455e1d4"}]}], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0], {0x288, 0x6, "ac6d30", 0x4, 0x8c, 0x3f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}, [@dstopts={0x3e, 0x3c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0xff, 0xbb, "fba230cc94cf63fc81ffaaab7a56d19bb18625ca16797605fce4458bd659fa8db4db024c4058d92eb0e799f46be8364c0197548aaaf002c26b60623df7c05536900d7c1af1efdca5d0ee58b926840195ff119c84309ad7e7e71a5e5bc42fb17b99207d79585ebdb141b3eec504087222935aa3b4a40f3ad03da1331e1a1f63eb56877c3e333a4449ba1f14f64275d989a5e2e8c1b7a5a5b0ecefc81a6952083f826f20a46597138dbef12f694ec30b8461dc94cd700ebaee8d5a0b"}, {0xc9, 0xd2, "830e16dfbbd1b111f4389bdcd108401323d00ca0d95c479e738c47ffaec0b5f80b446f37befc80452b1ca2dd0ff8fb59ce2a564e42940e8d8bce4c1f6275930cf85bd4e8856c367f2c1a8e0f7b3b6f109393a794bdc07447d907a37970772b94044571c6b6ea7ca7c5a78472d5e0c1e1b4526faeae655b2a7c63fce88f7e0a0203ed5d3e5a761b0e52602a7aa64edff013599a7659750cf3db544cef89417d5849c24cd47702eeef2121d6f4497034aadfff3de8fc7009ae0e94fb9bcdd6efe6f6a9348969f94ddcdf66e055352d8e0c3e5c"}, {0xfe, 0x50, "ce961811938fa552df58c59af582fdf012eda45ba7fadfa0856c474fc01cd95f7ec694204ba78be7236ed2571163ba79fb97f0c9cfe26ef82fbd136cb4c27ee672de5df9fc9fc2fba92c178b7e933ee0"}]}, @hopopts={0x5c, 0x231, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [{0x5, 0xcc, "b8e40f6094e036547202d8de1bb5f6913e276b453637b3f1abe502c8d710f0046ec6d9758f9c6b969684d01c4417e5f00a83d77857ddd27a71cec1f2ea4a013b3973231a2803c80c9946688c6f64476440546af32822c2e44924d2dd427094fdb855dba3fedf8adbf7dcb809db9244262e45bd728df38500c6465adc2fde6f8d624eee07ebd366acac4e44fde885e24b7e40d69fba96a78867830322f07e4a33df7a6cbcb93d42a3d7168a641e1abb76940b7e14c7b6a887bd9c12298fb6ef64895f71dd69184e6eb2d30d23"}, {0xff, 0x4d, "43ca9c926e3ae68ad813e292e2a05bac1ab20f2dbb39f6746df04db1fe7d9efb6920d3d28545a4e36ae4bd312f802da9db4af756c355799475314ff89d1f850fa0a3360d5c40f84ac3014de259"}, {0x7, 0x1000, "148fd44ce626d0bf4078ea69c73747679ec4e340152386ca66ca75ece325d1283284bafd2fb939fa36f3684645a5a51c9242c25a9aba96a7d462f87ef66ee146beb7dfd69e447c83258c5ad0196d9a56324cc99c6e39d9e3efba054b9596fe703d71efe0755036434dca95cd9357d9828c0f26b13bf590f9e49b001c1d929018e68e0626dddb888d55957a0f1967bc4a25f57b7778b531d00a1871f01b029811fe1a6b735103c4dc8b4e60fe8bee42b72208b702933d06fb36aebb7ff289e911a18c7964e31a14410c306fc2073c024fe09d39fa9599910f5f43794e4b35137ab36278d825fda804d93f2f1f931b4d37f2f23563dbe6dbc4f16bd2fd9e4ba4c0eedd994364661c1b13b09cd3ce2834a00ef6fecd7ba4393c7402f6d1dba59541633e86deea413b1249f90856adc5ca1fac058e2ecefb721e099687497c9918a8f4705e78512bf9be121a993032e71ac749878fefc7a3b2425c9a1bf73baf031e264f91e0825f435cbb6711e31e0f08cd322f5c3ae2b089a96767f39895a0f11fea197e8af99f35e464d7c423df01dcb5eac3d076badb94de68f9945999f55f99032ed10dbb9ee3778e7ca565751bc9de6cdb494ae2de6513ca93393364379b91fc20f03de4dfbc46d1d56852277bf06d14c47cf7ae17f98faec9e9ac04ab1418da44bc53b50b2e9c8d740b30f7d3f2b08dddf12fc889860876b7a9476e01ce214415873681daab81d263ca5f4ae11641525c177fce3c79feaef651f880e8db43cdc92ff542e89487ed728095cd44c66814e9832bc25426f843797a35ff880fc1766f5a08c3442dc116a7b60d591c3d4eb551b156c2152d46a06ced2a7409262e571ed376159762f2ba4704e32f8317a2e20a90a603082aa9263054f508ef383a51ed2d8bf41baabf9cd0ae383e3bbc8362ad7418458f460a475c56ba92c1489a6cca996fba375eb96ac3c9adc6334b91e5cccb3f479582d33193c83afc748c06505cbcbf9a1822b3dd6060cd8b3eb928a022d12c3375d8a0e2d2f286e4b794d6fb1bea5ad237a44f2428d80314c0f5390e56bc3408e7dc38b4ff64263390e4f1caf85042328c661156d6b53436b1b9f029fc181a7387d6e1308de3bce834f3b8cdccc1fb9ae27e862e1db859358238bce106c3c48ed3f8f4ca67c1cccae1bf7acb8dc2a9286b59ff3872980d514dbf02b4acd236ee9f081f2de8a45459fddd2b2b4e9415bdde3141f73d3fbb53a8a9342555ec4e1a4fd4d7f5b119e088c4c57be069e97ae83f1a74a32e8701bad30fe43fe01bfc876639b45624192ad256e3b1f3c025c5443e4d5824e18d88a2ac889221fcb960126d79bb5486ba055dca5172e077ac4d9f8af13d3b4376e64a0441bf36ac969e6f24c2891ad0f9f66d7c5ea4421eadcacb685a3c77a6f5d188c16c7e9acc91a53567160d49b88171f97359f968df6378d3ec5f6ab55a65da42fc6f50cd14423221989f30a4900a1a6cd242b6111a3afdfa30cea7b799e00a38d9a1087c4ac3701294712c4f18c9bc04499b13009d5a78d0bc708668d597b99fbd924d57bcbc8a33ae73d0b6e1ba060e1f6f04173be254109920db82f748ef36703e308843cd635137dddf374935c0a42fec77fd544a2e37aed6c14a7647e7254f2cd9646494abcf0e375eed1d648689ca9585549ae8df40b428505c0d3172470fa59902a517e7db7184edc5110c0191c8dbdfb0f573cff8755f34035869e988746c347d701eb055c934176e8f387fd5823e93ac64378bba1ae45e5ac80938322affc051b637f2591272a299cd618892d15bd949343b4cdc932080d1126648a545043fc5331fab0d56bf91fd7d95614ecf03c0ac89d3dd4b434b7d91055e965826fae2d9e2466d73d2d0b17aa91fc5c2ccb09d2367a496a8b7e39654271cdd7dfa82aa69bcd26260adf52586cdfcca4983af5d45a7ffee1699c0caa76c16f0b7c8109800305656dbe67b506866b4312329280cfc4a3f6846cfbe0cfcf0a26a42dcebcd7ec019d90130a3a1290b4211c8e4c9f867270dbd16280e6fd1862bb5d449cc493126d0d77e48d4563900628b70243bd1e797bad4c50cb37c2a04cd60a93bfd00359d438d1fcc4c55e61c39f2ae4def4c9d66ea06ef703dd846f590f252e5677e74c860bff2f4ce3b8373f3db8e16dcf380777c7b30a76b9783265504351b637dd602954db9564e75078c18c312f7b7e5b77280be36fe93fad47464df65908e396c432843010dcd664e8afccb12b6cb3d0186ac12d5cd0f4857707ba8862f4b4a69b40dd9fdbec52c4fd6991551d7f3eb8acd35a64ebf17aa7feba73fc7b9d47c7188da2087b6ca655bb28683c2f97e21b33a2d5086aa8e32e94970ed0ac531a556bfba52fcb8fb0d25c6ada7b3deefec6bd839ea9672b60b77c0c5e1cf5a3120b423b1406c8af9c4518b8c3ad4434de384137be0719e23574e82f098fbae55c314b5fa0b0ca3ebebc560c4718f95b2fb557fcb7b3cf58d96cb2d035e41db2754b13212b91427ce2af5ab7c1abce86abb185da7a0731a442a48b5e63beb34afde98975e57edb59530a88f27e6cc10fb147249d28dc2198b52ce7175a0387e2b3456d523d6886a16028a0cf33a62a3233b9ea4cee35de66c272f57c22ff612761df339780624486fa815b9f80d79e209947ea400e96c1e3e963fb61e3f5a5617b91faa7842fc0e501428154cf60eca79800645652664d2335b6bb948deaabddc5703faa8a023575b08db090e32babb62550cfa55620adf4e503541a32aa1368958a83e3a99978b973cd9738b0f657eb777c7b412c8da2c55a031677c4402e5dc4e14da6956c7ecef8cbd03b314c224bb510d541d40dbcaafe8dc68cb074e7a6330bc6f59cdabe097b7a20e3fcc420ad38e7cbfef28e223969fb02060516488319be2e93426e948717d2baa40566026059776526c2464a131bf3576efd122ca1130b1b6d7f1590f6e716e076324ed28cbc99b40db1347c5425df81aff461fca219804fe63c0d72c21f09b23335145d205f79470b4a9ae8fdff3cf6bbd2d28dc60df9713f2ba40bb934622577a3136123bce2ca069ae41900925898cf5b2869d04e5c32f886734313981e567855a9575fadeddb00c7d6e329fb37956b194620505cb0a1ad35320cf0c9e26cf56f50195221425dee48959ae36172881b353c839fa29ffa2d5997fa491b152b7eb3f3e80068f89422bf000551ed8d62df0bed9f4c91110c8a61af9d7d8d4ae890f7fe63d66ce08f55aef3f61ec0e7868ef0e26742b88b12d005bb3dce7e72b3d5a3594b26cb6af5dcaa6c40d9fc0ff1c433c05b5ea1a4d715e78c74f8cf720f9e77f67d4c567b07d3114e6e7a63a9f7265a5ff157d7cfcadfaf03a15f038087535bb2e89853af5ab9ed7db1b576aa5825e1e85f5b19d8ff2c7a25f43c08882f7528a3e23f1d32969a1b5d3cb0d61b798f8b2b0624791a34f76f118579393317cc65756aad8a28a9212e64da15968d9a8977c6c0c93ee1756b731c6dddbb46c72642b766b9a84700a0340715f664c54450eb14b184e41be9e20e198aac35e2c7477c11e41b9016e65c8396cb2fffd6b9a9695fd1bd80a8a31e24e475c5efae2e460aa793c49d60b662ab0f947270e1652b3b0b570960f0d438ff27ad79ec5820477558cdeecf23cc4f6da88087c184fa8825d1a7100809119b49192b49a5dc3b3300560c006f76e6bb239437737685feb0135faca0481d7094adcf47e9e4848df3ea8b0d3a3f93cecd6dd13d1b5a15969c69944602568232ad188204d998214e6d8be458a8d28f0fb172b439103f5fe72c874545054a289015afac4413d7c691bbde6db7b2ce2d27f63bdb75bb58bae31c3e5217842dda1ee52ea126e91f48b0cf9dc4f7203285ecb0065c1a5d0aa1f29a08d08d64b319863c544fb04a589a4ce7745c386e77ae1274c6172a1cf4cea2127fd5e22277d30f7cdfc6ba634e565f0f52b0bf7f9b6ba97af5180e60fd8519379c3b07f0853f0deb94b8006e54edd6d47b545d784bcedf2cce8a1b0eec64635573f8e8708ec95125e757f1abacfd03ae7c1de210089c2bc09b5e7b18c708ab3710afa29d117c01585ab101b4ce6f26e6ae87360990d7731f88a3ee08c16b038ee651ddb5b55273c488ab9fbb8e1dfb49e5a4bb116d4c6eed09695bf0d999f5822de742fa4da994e74de7bd08823efe5f12f481ab80420bb1641e16a7cddeecec0bcfb58f82990cd709dd3a794bd00e3edf26ea7b2378840c62e0669d83676ea2b7fd20110921a266e5fa8812d53a171b4deb1f9aa749b3918980f09665d219c8127a80b188aca581965b9053401c9b0797da737c5b20f43dd1a9dc40e0d8efc6d62379ee6100d72c8752f5c9b7b4ab5bfef2e4b03795ef41e2aabe6523a94ec1e92ce9419435a0ed36592640e1b3abdf77581488877515d4ccb287f17256a66cfe4dcb62b8bbba50a511145ab6e54eb5eeb4644ffdd7debc67ff338296238a51f20580a70a65006237261dca60f1a288d7a4409ce98191d16d193361407896211b9cb4c32a7ed7a7f634a2f1cd04ccf5e829e7a2713454b88b756b339e70ff11bebfa4d9c8f0d6a970bbf7fb3c5bd2c77708f9e51341566ab836e8949ed26c77c31529410d6625ac8e67b9feced1c4fa9700a5f29008e3252b2f1ac762bc66ae6082f059c3376f533ddda4d85cf78de825ca3d4edea0a2d16d0c06e91e3328d959bf5ea1466a0622df0892eb99a1a88d9bcd53bc645db0dd88a1b0006bba5ea42c7c6797d9cdc23381a2f516ff6090b32e219b50ffa6ba66f450662b1f93c61bb5698a8c5b86e1f5ab7715c647c156092dadcd56de6226af68b38201efc02cdae0f6a4f97efbb37364685d88607cf7f5b64f8ddc65e981defc4234fa2ec4572671c024cf563aa789395eb4d06e5427123f0dbccd5f463f7306614d7a0a784beda58ab7092e728caf798d2a2992b5679d98f4c935a13c005f4d6ec4b9664fdab92944cebf479715ef0657f276a29a1c522c8e36868d6c432f15ea588398b453e2d1d9fae39c24f0310ce8279cf6611b89a2e23e709bcee8c361548562b749e399b7db59cfe7eb87acbe978542c92c61f7f0442a7219da766903359626530854607abbde5cee16b4a6d800b4853a82d59c9f3c170ee18d5f5bc482496ae91938a33daed3140d952840c294b3b637ba9b6de628e5d5bd5fc4c3af87c806af37983c2ca79c2e57a58eae026e7d39c68b2c1bddd5b6ec8f6e3da62e12dd8131bf3ee1129f91121216c6c828229326bdcaa3ce7e9648ac347c1f643bb140372704b1155ffa60658919a6e4841acc046f493e3aa209cab4d0fd2ee49ead1fc05d2d1759a3299bd3aab1ae47855b2925bb18c8b26d69d1a830e96882f839b942ff48bb37fee141510565144953c8ec259865aa3c1cb98c6c17f0ed7ba6782bc61de572da4957cbf7617278697f595fc1be8a116aa2b1c07d113e463fe3a72c14252594351d298537e84f86f4d0cd34550827f2eb7110ae7e55d13bdfc5e2d82741a131362f8f95da4640d09d39695a966277015e7d7afdb1c4a076854cd98dc1e95093f51d44ca2c4fb38293cc327351b857b523f97053f08c1873174fb26ee8f4153f4898456d80aa51a1cf591339dcf1c2726d02adf080b8cc8dcb189e4db2ba73e659280912a4332661baeb518797f88d0deec32d413ed7afb91fa8162cbbd48c242f21470349b09470935cfc35803d5512dda9210601cd2c90aa89ba5547fa023f4a72822927d2e862a1e1ad0a1797165aea35abbea0a74"}, {0xff, 0x44, "35fc6d3c2aaeea4a06708d0a1ce8b75830bcf128d7d3371c1b5c83412c61199333aaf61611804272d5c87d61ddeae3187b0b343b012a43b6e9cef3940cd096c1ac4c57c0"}, {0xc2, 0x24, "8c7fd7fce885d2ae4285e0021a93f1441f1cecc01e05610c939d73ad59d4c4d252cc22c4"}]}, @fragment={0xa9, 0xeb, 0x1000, 0x7, 0x80000000, 0x45e8000, 0x2}], "f0e09ad6641928e12f62a75a01bd5c1fe25e10d406fdc54756d45e1dc820dded003f7ea0142a35826cf80b93a865f4b98e4665dbb7e254fe33700a7f1f4e83382a7fe3a9eb63a8d673f7c36356d3a33181893e4b8cd2cd103129dc0bdd0bb3e6d93f25cae5331d4212c583baad4960137ba4e297c3576b5922fec0ee569818893a80d893f0418a0feeb92df26356ae6382ed1b94710f169dddeea4b90a4710991f17caa159641291d1759697691f4a4b587b874c265cb5ed922b3a8278e41d82c3b80c1b8b0e3b39db40b27643be455619411a883ab41808a8bf1b0b37afa444c13e38c20dc58e6416c728075bdde7faf239dcafd42fdb770fe5cf829408e4633134310853de03b894abd0fc15e1a89aa9feea6e6dfac38e099f788f32b1997869e9c765a19ed9e3dd6014aff215c3a2e83869ba643b605107e84a4b2baea5fd7a1577dad6ddd1e33f8664940476268edd459bd93b1e0078f39a1d948e36dcafbd4965f0d571adf8b8708f6f8b6f36f718405bd37ffdac9dcbe2a370ec815d4d8d7636dd18252229a2e440b303c6ccb492818a0e63b4998de53fe6078573b6ca364bf7c4301763953d01e24be12dda8ec8a641e8bc29068c03372339f1240954bfa6fd32f7398a20cbd76036efb40fcc6c0ebf7ca9952a24f034716f676c95188e365d770c7ce079223cf3c5024dc12587331300406ea278482f43333b97de113da922aaa2693cac0dd0921bd9544d8e979259bd872adbec3d66591282f5e4c22d9a43098a59bbe1946aab0b2ca55ef24d2ebc1a31c36248c993e958436e83040e4b00c6508ac8c6f2d36b4849a882c670860a295b1a5769a0daa34ddef9bb166f781c00f263002fdb9af51f51ea55be0dce1e6cee9ab804cd168d5790695c363796e06ffeb5801996d6764cd6e13aeb93f252edbf6d235699ad64600187fef733762b75710c8a0d85a8a23ddb28a5385475978496fd2894bf1a0cc0579513b4ceed70271bd96c185187f2d183513785f9a23dc08a6293ac1e8bc6b6cf083d494d45a1afbe33a518de1d27d4c516cf1806aacacf862319bd67c6f5fd0d13e7e03c51d46c65520074eedec6ad5286e2368dc5f648065857cfd747520a00f7d71147a4ade4cbc363b72cf0dd9dd0c84cfd0447237dbea36264a1af76e2bbd0e9203185f1c9dfc0287910f19a45352b68763debfbd5f62b01d7abc156ff502d0bb3fba18e5d085ed2ec1470d7b92e8793641559e689fab5f209cf532927d0eb62bfa7d534bf0ac77e9664e1c67f6c530c456ea05144aa5f078702e122a1fa7cdeb5010bcd29cb905063ddfe4168d72815dc3dcf4f669471847ea8a23c3074b7d76282ba656df544f6e1044f8998308d8c2bf429c0f025c87737fbf5f7de52e19fc5fc2f7f56e6ad8b36915e3fca7c9bbcd0cbd753056357c18a57c525ac487ce10563fe6efbe7e9b857bf4a12d72ae8a2b0867e3a91966bdf03ab1218b7d15cdaa2dd8af7ed82907822a6387d42bf0fc4431f0620577af5e754eb9d60450966e1da3362bf30f99e1c84a0947478307df6705444863138823970a85324d6dc143ca62060959e3f32d70ea73edd30549dbca345555f1588e34a10526e8359ae1249c1ff586371e3b59786737a5f55cd2fdeb0ee63ef66836d1047294d3a09eef0571b916e66a2ce7225f95b6d296b4a7c434f3b0c34284423faf13d814b2062923e855459cf42ca94a15f189ec28e1bc975e531a0265407ae48c4f892a61a018dc4c3c2d498bfa6a5e20d0e7141cec08dcd33b84e1d3fc30a0324e4f6bf41517b93f046f64dc511ee654632fa0300d4edb5357afb8305f90f7e7871cb0a6a6c3e9d709df7a6566a0383308a9de39b0909e1d3441b4b814f163d96ae6cef4c4afd591189c0b6de8b200dc5721272255bd97ee884fe314553135c844b9692828b185d33c229b1ec8438f7274e6e00775cbe4aca6b16a89cf69601af56fa49dd282bae0447f33a2ad8ec9b7701300c5322fb104e0922d5211446193835ea5d1b26b74f0f36df2ccf26abe62038c3936f34566795068c445ccdd049d1bab16d7a9956303ff1c96a3c86170f0e62143a7aa7f6f754de3be3c9f8bc9d70b342c692797d891cbb655f301b8644aca6be12136d0ed332631419431ead2de4ef30133c4a9f42ce3e8578e9d0146de122265f96696757d1bf965ce137966c0de96f2b77b7ac5037efe0687849eff082c7fb643bf8f86a919a5ee8cb1fe23b7e26827c367da9cedd03c471312edb4ccff5ee376ce807ce25e8ddc61a364caa658b97bfbba23cdfe2e6f3fa182f0c6a1bcf5e6dbc6b2dc8e4b1fdba4857633ca33a6626d2d33660285463032b2d6fb9a8e8d43c08edec6fcd0b684bb420c0418615617516ba03d644b0c853cfc031cabacdaa628e981d27a354bc1165515f1b8e745d996f8471fd87f59b2b838ea5dff10f97e1c11855fa769450def21fd127627de56ee98df1b7f7ac42adc67f8f4311eb139893c1582e7780abcbe39d2cce6efae0c70004c52964a1cab6e7b643a78852189b5eb98def7ddb72aebc0cca05aa626e46c129a8ecac2b8fd82676d8f685acabfe46402d9281d71534702791b3e9156e1566c8bcbc2d66321d8f7002f049f067503dc34adc872c2003353b320030c6b42f88e87cf7141b36a2d8099c92dd608e9894a857725ade6af8f328ad84dbe7dac8dafa089e65dc5753254bda94c6411e022fdbb50aa544a0e453416b066715d821860647fdf88ec247d6d42e86b3998887d0f038eb5b43e20ea6e21cb616505f2deea7f650eacd06a8969d49866afd74d4f62ecf3b699e9e38221a905535eb587509edc75a416ace7bb7dfba492992893890e49d3fc01a8264c10c99c878fc492fbf4a11676457ad7af18e844c07318d50fc576b5a2ff1e52684b8ff156139bf9334b4eacce04645ae35d31bd967bf9de8eeb721fccbe70e59d1e31449aac8723d78c4ca4a4ee7374650f76c3e59a7288283749bee1f417f763b3d9ee7df7a04a49bdd05191b0ca509d449a9142356254b99ef3f4db6ab7817d96e76aa7c4d8c055041f98e613b47e341e319304cd74b15c0d2649938c3c52373078759ba49be547fd8aa930d6ab5d2132e8d3afb564c440a8dd46ce5d555dc7e227f94114b5843290dcf1bd24e3dfa3db34c388575bd1c981c6fda02e7874e00f9d9ecc1d02347a82c8ff790cca1c96591d3383e0a276162f55d9565aab5829b7820415e8a07a0f394bae2f0886d5224f3d75395235ed7c7dc72b5bb216812cc50a913c064cbfdd46e55f34fcb1c69b52a97f125f91b81ab8aae6060312538ce06fb7e564d2e8675df6f18a90d94d4d860262634bd6005ffd0f342caf9b21ae47cc5da393a6f2886489dff8feaf8672c7fe42639f815625d28cd83f48ebb61169e4f5476919de77441dceb7845849f8db265fb56274bd3467dd37b667770b80ad3960245baecb1dd7d8f92006be1549375f7d04a2299fc18c9b531c02d6eeb0e462ebe01b085d42d8685e9871b782de61ab55cf49fe3ecec817f2af93d473122ea38281f5f3d9816a0bad5b75a3bac9adb8ea02ddfd352225d36343b30b1f40ad0973a4d162bae68a9f2552427f28b57c9ffd4dae611d8902b801625d297143440a9eea3f4514d7ebe2c5c82c1c9feaf15d713103538c12ba3a9be92ee033e834680cddc7d6e246e73e4f0cb2eacdd17894f2410e086be6b131f2f322b7256e171299f227dec1f50103757997773a4a969c9cc0cc78a6b80f2a3ccf175107d1f2c944660f88b4a1747f5adca3a3df0353177b71313798c9e953ea7d3879e5582a2fb0fc4c865c39810c721629ebec0af7612f0a96d3d6f25796baed380e11c92315cd64a4ec635d91de3d03e65374235b75a511526fb1fc46cd43b94ff33519c5cc431a981a5332ee510e165402089143c1a84ff6b74fe6b7b3af3997c7daeb3213548eaeb34532bcdf0449ff102c523980b9391995b353c3c15d82b790470add65d101f33293be55f47526463cdd4c781792e636110e969ee992f440910caf8890199e4347de0eeba9b398a33b768d0567fbed704dfd11acb084a9b80b1475638caaeaf1780795326f510b89f7d964ab9c5bec38055b4fcc3c6f378028a3ff5527c8a30d7c45fd9d5e6f3980edec6a7b71db93f7b7937d5c5a856def0720bf631b0ce04419aef6c0daee7b5685c77b6a9c830cc24ce64948b53921a15b8a33d75514b2b1896c3b8c378fb99cce70e9b765895cf60b1235da6a1d75ff9c74de1840bd1e2b30d7060a0584d81189ec10301581a58f554ebb001607658d5f82b5cab3e603fec1d527bfa0d3b5e7ad11124abf17f6a83e74c1de0ffb0710ddc100b51570c44176e88bcc1259df4a3a7ea8b633352b0022015bd648a4090ab94efbeffaa988ea1f9278a24c350897fb6aaa5862a2f79b8879f3d25efd66a3c28c2386891ccd402b3477b0d212c718d0c0911550da594c1f010a5d33c1be24fb3b2d7f3a768b314cdd373282048b542013a55cd668dc06999ef02839378e19b4c620c2784fa37aea0e8aabab673858bcd8a954655c0ae8a0005028c3de01327bf3de9df48eaaeb9441f75cce2ed098eb9610c07425d12b58416b55c906a70a949073a30bcb88e5aabc86b53546b129ce9fc7f583c1fe45c3fac069f482cd4206d2163ff111ce3beb8edfc7823c2151796a8a16f9ce8ce7c5c43cbe7a9e1bb4097634380823cce31b9c16a00b13d16a84f11c766a26c323f3633f491fdba9d28f544475094dcd355364efbcd45ef81b035a92cd984aa04029f64a3c5175dcd072e69cbdacf141bad0bb26d2e698ec86d014b5b44fb22662f38ef8491e64da676febae06f652cd9befcd570ec26a17faf237b3450220acac4fe37c20c586452c50cf9c457664bc13d4988aa9dbd1eac99041db88be55cfe1780bbb4b30451f437d323c360f405d82f04542bf79cf68091be09f6ae9d0c6b036e40e23bbf5bef94ceafb488917335d7155eec9c4f28784f70f1bf57eafc340892808e13aa335b84a8e02e2f2741607f4babbab487fe94309823ca2c2fdd41b1224c784f0a3ed8cebad41df2bac7006540140644e242aea34e33da9b16519d805517680bd81036ddf53096d337851f40b097d34dde7fd23ce9f846a06bedd22841e7505b449ec579db92546a3ac39621551b5eb10076d79f185215bd5a3a9803f928936cdfdb9ba47d0d9db2503f39d5b7f4b1a92edaf04d61891d13c1162ffad4ba39fa2cb64c149fe27adee9b0abc3eb885b855de2e40870b280ee86df0348dd87ad9974285bd55b3d854a58ba5eb15ffbc8d6e076de0140e479d00689c6c840a92767137e45344495fd9e17512039d7e1690283759df0ce237c1b1551dccec617e27f1431c3c5b17d19435122abd5f13d3b44872fbe280e3d2684efd6cc61844e37f7949a25546e81031316dd9785d098195b3c14cd912fc7db5f50cd7d857bf67096ae53ebf7ab88639754a5ab4848c06abd76eaad20da7589d3f21ce25fedb6361c7ab3a0405d4df857bc4eab8a153e60741e59b55c217d01f0520940f26520030793bcb76e025bd397fa286b51c4642945a9f683ebb64574401f837f6f08ac85af64cb03e591a9dab1f0956c6649cf877feaad6782bdcbbcfe88eeb34b288f4d73e32ae913723b8c4f03a28d0ffb4ab616283c955c20b781816cbfe997a1e38cae2386eddcbb2054dffcdf48c39db0954e08922e69af78e61fa9e1151e7099edc167d63baaea927ae366d78f255771b59f9ec1ca"}}}}}, 0x3974) write$tun(r1, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) r5 = getpgid(0xffffffffffffffff) getpgrp(r5) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f000093f000-0xa)="2e2f636f6e74726f6c00", &(0x7f000013b000-0x11)=@random={"7400870000060000", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000f75000-0x4)=0x1, 0x4) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) accept4$unix(r2, &(0x7f0000c5c000)=@abs={0x0, 0x0, 0x0}, &(0x7f0000394000-0x4)=0x8, 0x80000) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000a5000)={[0x5f02fe144f460eb5, 0xd006, 0xf000, 0x5001], 0x7, 0x80, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x3, 0x0, &(0x7f0000839000)={0x0, 0x0}) setsockopt$sock_str(r0, 0x1, 0x19, &(0x7f0000033000-0x18)="2d73797374656d706f7369785f61636c5f61636365737300", 0x18) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:57 executing program 6 (fault-call:9 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000134000)={0x0, 0x0}, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000899000-0x20)={@common="74756e6c300000000000000000000000", @ifru_flags=0x1400}) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000bc7000-0x18)={0xc000000000000000, 0x3, 0x5594378a, 0xffffffffffffffe0, 0x0, 0x6}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000d05000-0x8)={0x0, 0x0}, &(0x7f0000603000-0x4)=0x8) r2 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r2, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x6, 0x0) 2017/12/02 09:13:57 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = gettid() socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000d9e000)={0x0, 0x0}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000e76000-0xc)="2f6465762f72666b696c6c00", 0x400000, 0x0) recvfrom$inet(r2, &(0x7f0000aa3000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa5, 0x40010001, &(0x7f0000e46000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000e67000-0x91)={{{@in=@multicast1=0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000e33000-0x4)=0xe8) r4 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000e09000)={r0, r3, r4}, 0xc) 2017/12/02 09:13:57 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f000085d000-0x8)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f000034c000-0x8)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000f27000-0x4)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000c42000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000377000)=0xe8) stat(&(0x7f000011d000)="2e2f66696c653000", &(0x7f000085c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000b0f000)={r3, r4, r5}, 0xc) 2017/12/02 09:13:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000f26000-0x4)=0x0, 0x800) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f000095f000-0x4)=0x29d, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00009bb000)={0x0, 0x5, 0x0, 0x441db9e6, 0xffffffffffffff38}, &(0x7f0000d7e000)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000220000-0x108)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x5, 0x81, 0x20, 0x7, 0x401, 0x1, 0x0, 0xff, 0x0, 0x80000001, 0x100000000, 0x8000, 0x7f, 0x4, 0x40]}, &(0x7f00005af000)=0x108) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000c7b000)={r1, 0x1, 0x9, 0x3f, 0x5, 0x9a, 0x9, 0x3ff, {r2, @in={{0x2, 0x0, @rand_addr=0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0xfffffffffffffff7, 0x7, 0x8, 0x40}}, &(0x7f00004de000)=0xb8) fadvise64(r0, 0x0, 0x0, 0x3) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f000096b000)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffff8, 0x9}, &(0x7f0000638000)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000063a000-0x8)={r1, 0x0}, &(0x7f00006ec000-0x4)=0x8) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f00002c7000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:57 executing program 7 (fault-call:11 fault-nth:0): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) remap_file_pages(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0x0, 0x57, 0x72143) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000036000)={0x5, 0x2d4, 0x10001, 0x1, 0x6d, 0x0, 0x0, 0x5d, 0x9, 0x180000000}) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) rmdir(&(0x7f0000b12000)="2e2f636f6e74726f6c00") 2017/12/02 09:13:57 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000000000)=0x1c, 0x80000) fcntl$setsig(r0, 0xa, 0xd) r1 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00007b2000)=0x0) fcntl$lock(r1, 0x6, &(0x7f00005fe000)={0x1, 0x1, 0x4, 0x20, r2}) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:57 executing program 6 (fault-call:9 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 571.218009] audit: type=1326 audit(1512206037.873:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18267 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:13:57 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) r4 = inotify_init1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r5, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000954000)=0x0, 0x4) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r5, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000c30000)="2f6465762f6175746f667300", 0x80121002, 0x0) clock_gettime(0x0, &(0x7f000067a000-0x8)={0x0, 0x0}) ppoll(&(0x7f0000f40000)=[{r0, 0x610c, 0x0}, {r0, 0x80, 0x0}, {r0, 0x40, 0x0}], 0x3, &(0x7f0000ce2000-0x8)={r1, r2+30000000}, &(0x7f0000f92000)={0x1}, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000514000)={0x7, 0x6}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000f9b000)=0xbc) socket$inet_icmp_raw(0x2, 0x3, 0x1) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:57 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000e3c000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000001000-0x63)="0dfd4a0f4a715d28b3552c9b92db227ac9125c7e4a6f9565c0f5108b6487e4c5794cfa04a821d3ff633ad7afc619337696cb89d2758b2b7d5540866842c990cc16038741be5d9af50edf8337c2ed566bdec39b52280effe9caa3eb42477e97728369f7", 0x63) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001000-0x50)=[{0x3, 0x2}, {0xa, 0x800000000000000}, {0xe, 0x6}, {0xf, 0x2}, {0xb, 0x4}, {0x8, 0x840d}, {0x2, 0x4}, {0x8, 0xffffffffffffca27}, {0xf, 0x59}, {0x7, 0x7fff}], 0xa) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:57 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r2, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 571.249685] FAULT_INJECTION: forcing a failure. [ 571.249685] name failslab, interval 1, probability 0, space 0, times 0 [ 571.249695] CPU: 0 PID: 18274 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 2017/12/02 09:13:58 executing program 7 (fault-call:11 fault-nth:1): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:58 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)="2e2f66696c653000", 0x2004, 0x6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002000-0x20)={0x10001, 0xffffffffffffff80, 0x0, 0x9, 0x1, 0x2, 0x5, 0x2, 0x0}, &(0x7f0000001000-0x4)=0x20) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r1, &(0x7f0000002000-0x4)=0x4) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000c58000-0x6)={0x4, 0x400000000000000, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) delete_module(&(0x7f00004f8000)="3a6e6f6465762300", 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() [ 571.249701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.249704] Call Trace: [ 571.249718] dump_stack+0x194/0x257 [ 571.249733] ? arch_local_irq_restore+0x53/0x53 [ 571.249761] should_fail+0x8c0/0xa40 2017/12/02 09:13:58 executing program 6 (fault-call:9 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:58 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000315000)={0x0, 0x0}) perf_event_open(&(0x7f000067d000)={0xfffffffffffffffd, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x10, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:13:58 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) membarrier(0x19, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:58 executing program 3: r0 = perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000eb0000)="2f6465762f6175746f667300", 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000c39000-0xc)={@multicast1=0x0, @loopback=0x0, @rand_addr=0x0}, &(0x7f0000731000-0x4)=0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr(r0, &(0x7f0000953000-0x15)=@known="636f6d2e6170706c652e46696e646572496e666f00", &(0x7f00006ed000)="2b63707573657473797374656d7b00", 0xf, 0x2) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) r4 = syz_open_dev$sg(&(0x7f000059a000-0x9)="2f6465762f73672300", 0xffff, 0x404080) ioctl$TUNSETNOCSUM(r4, 0x400454c8, &(0x7f0000610000)=0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f000045b000)=0x994, 0x4) 2017/12/02 09:13:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f000045f000-0x8)={0x0, 0x0}) setitimer(0x2, &(0x7f000029d000-0x10)={{0x77359400, 0x0}, {r5, r6/1000+30000}}, &(0x7f0000f6a000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00001b2000-0x9)="2f6465762f73672300", 0x7, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f000049f000-0xf)=@random={"757465722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:58 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00008ae000-0xb)="6173796d6d657472696300", &(0x7f00004ae000)={0x73, 0x79, 0x7a, 0x0, 0x0}, r0) [ 571.249775] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.249785] ? lock_downgrade+0x980/0x980 [ 571.249798] ? get_pid_task+0xbc/0x140 2017/12/02 09:13:58 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x0, 0x0, 0x1, 0xc6d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = dup2(r0, r0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00004e8000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_data=&(0x7f0000ae2000-0x20)="05d60b75c003aa825079386991cc0d27ce408c8ad14af08917a3c87304ae9d9e"}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f000068b000-0x10)=@generic="f4ad7e54cc48d1c74a3ff4c6b8bcb78f") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f000035a000)={0x0, 0x9}, &(0x7f0000442000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000d99000)=@assoc_value={r3, 0x3}, &(0x7f0000ff2000)=0x8) 2017/12/02 09:13:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000096f000)="2f6465762f73657175656e63657200", 0x2002, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000dda000-0x1)={0x4}, 0x1) r1 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r1, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 571.249816] ? find_held_lock+0x39/0x1d0 [ 571.249838] ? lock_downgrade+0x980/0x980 [ 571.249872] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 571.249891] ? rcu_note_context_switch+0x710/0x710 [ 571.249900] ? __lock_is_held+0xbc/0x140 [ 571.249922] should_failslab+0xec/0x120 2017/12/02 09:13:58 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) socketpair(0x5, 0x0, 0x0, &(0x7f00002f6000-0x8)={0x0, 0x0}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f000038a000-0x2)={0x5, 0x5}, 0x2) 2017/12/02 09:13:58 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000624000)="2f6465762f72746300", 0x103002, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000001000-0x4)=0x0) perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f000054d000)="2f6465762f6b766d00", 0x10000000020000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x4, &(0x7f0000023000)={0x0, 0xd, 0x2, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a08000)=0x0) timer_delete(r3) r4 = memfd_create(&(0x7f0000cf5000)="2f6465762f6b766d00", 0x1) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00001ee000-0xdd)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") timer_gettime(r3, &(0x7f00007e1000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) r5 = memfd_create(&(0x7f00005af000)="2f6465762f6b766d00", 0x3) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000b41000-0x4)={0x7}, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000c3f000)={0x5e, 0xff, 0xe8a, "71756575653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xffffffffffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:58 executing program 7 (fault-call:11 fault-nth:2): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2017/12/02 09:13:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) fadvise64(r5, 0x0, 0x1, 0x0) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000c2c000-0x4)=0x7, 0x4) getpeername$ax25(r3, &(0x7f000020a000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000116000-0x4)=0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00001f6000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00006d0000-0x8)={r6, 0x0}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) sendfile(r4, r4, &(0x7f0000088000-0x8)=0x0, 0x2) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:58 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000d06000)=0x0) r1 = syz_open_dev$vcsa(&(0x7f000044f000)="2f6465762f766373612300", 0x1c4, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00003a1000-0x28)={r1, 0x0, 0x1c, 0xee, &(0x7f0000edb000-0x1c)="01cf839289089a17399aaff0fb98383309767a5d153287a90ec28a90", &(0x7f0000c10000-0xee)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x100000000, 0xd5d2}, 0x28) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) [ 571.249935] __kmalloc_track_caller+0x5f/0x760 [ 571.249952] ? strncpy_from_user+0x430/0x430 2017/12/02 09:13:58 executing program 6 (fault-call:9 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:58 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00001d6000)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) pipe(&(0x7f000039b000-0x8)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000266000-0xcc)=[@in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}, @in6={0xa, 0x3, 0x4, @loopback={0x0, 0x1}, 0x1}, @in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x7, @loopback={0x0, 0x1}, 0xfff}, @in6={0xa, 0x1, 0x1be, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x67}, @in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7}, @in={0x2, 0x2, @rand_addr=0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0xcc) gettid() [ 571.249963] ? strndup_user+0x62/0xb0 2017/12/02 09:13:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f000031b000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000e50000)=0x14) write$tun(r0, &(0x7f00001a8000)=@hdr={0x1, 0x83, 0xffff, 0xffff, 0x0, 0x9, @eth={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x0, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @empty=0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @multicast2=0xe0000002}}}}}, 0x34) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000dc8000)={0x0, 0x9, 0x0, 0x797, 0x2}, &(0x7f00004b3000)=0x18) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000538000-0x28)={0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) lookup_dcookie(0x6, &(0x7f0000f55000-0xfd)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfd) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000677000-0xa0)={r1, @in6={{0xa, 0x3, 0x7fff, @loopback={0x0, 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xec, 0x2, 0x5, 0x3, 0x52}, &(0x7f0000dde000)=0xa0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f000019f000-0xa0)={r2, @in6={{0xa, 0x1, 0x7, @loopback={0x0, 0x1}, 0xffffffffffffff01}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x0, 0xffffffffffffff7f, 0x6, 0x2}, 0xa0) syz_open_dev$loop(&(0x7f0000748000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:13:58 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000004a000)="2f6465762f7161745f6164665f63746c00", 0x200180, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f000089d000)=@assoc_value={0x0, 0x0}, &(0x7f00002b3000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00009ac000-0x8c)={r1, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000000)=0x8c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) [ 571.249981] memdup_user+0x2c/0x90 [ 571.249993] strndup_user+0x62/0xb0 [ 571.250006] copy_mount_string+0x24/0x40 [ 571.250017] compat_SyS_mount+0x2d/0x1070 2017/12/02 09:13:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) preadv(r0, &(0x7f00005de000)=[{&(0x7f00006fe000)="00000000000000000000000000000000000000000000000000000000000000000000", 0x22}, {&(0x7f000057c000-0xd2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd2}, {&(0x7f00000c9000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x47}, {&(0x7f0000220000-0x5a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x5a}, {&(0x7f0000fdf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xae}, {&(0x7f000070c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x74}, {&(0x7f00004c7000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe8}, {&(0x7f0000cf7000-0xb8)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb8}, {&(0x7f0000b19000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x91}], 0x9, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f00009e5000-0x8)=[{&(0x7f0000c65000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7d}], 0x1) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) munlock(&(0x7f0000b7b000/0x3000)=nil, 0x3000) 2017/12/02 09:13:58 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000253000/0x3000)=nil, 0x3000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:13:58 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000bee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x20000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f000024a000-0xa)={0x5, "7ada65e6dea6"}) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:58 executing program 7 (fault-call:11 fault-nth:3): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 571.250031] ? show_fd_locks+0x2c0/0x2c0 [ 571.250044] do_fast_syscall_32+0x3ee/0xf9d [ 571.250067] ? do_int80_syscall_32+0x9d0/0x9d0 2017/12/02 09:13:58 executing program 6 (fault-call:9 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:13:58 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() 2017/12/02 09:13:58 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) 2017/12/02 09:13:58 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)="2f6465762f73672300", 0x7fffffff, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001000)=r1) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001000-0x68)={0x6, 0x0, [{0x40000cbf, 0x0, 0x5}, {0x247, 0x0, 0xfef7}, {0x28e, 0x0, 0x5}, {0x324, 0x0, 0x3}, {0xa4a, 0x0, 0x1f}, {0xfce, 0x0, 0x10000}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000e2e000-0x58)={0x0, 0x3b, 0x1, @thr={&(0x7f0000804000-0xed)="8a21e0f2ea8e8d670908b9668a556554a34a743552b29c035ddbea1c22e9ed854b27dd1c53b016ec661a66f44d5b0f11e19db337b5205f9905f9040bfcf3257dc8f55e72013837eb2635a58202b3a8d9233e172eecdaf5baf3925a3b23a1fadfcf462bcb20766268174b9dda6fc23e00c9eceb2b429727b5f387c6a02a9a12b45ae98fc1db43d02ad64b28700d07c986e23e4e3a2f4f646cd9e2f064e33592c96ebd4a5ce0999810fedc5b1472214923e2b5ae73ca47e004c39b869cf8b549d7ebb8f86d3b46853b40a996e6216a4ceb84ba5168d5e612b529ed7a1fb6bd896fadd20fe7197b4c22e7d8ff59b5", &(0x7f0000f01000)="2d9bd934a9d8a0470f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00008e9000-0x4)=0x0) timer_settime(r2, 0x0, &(0x7f000042b000)={{0x0, 0x1c9c380}, {0x0, 0x0}}, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() 2017/12/02 09:13:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f000054b000-0x8)="2e2f66696c653000", 0x1, 0x120) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000a87000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:13:58 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000dfa000-0x9)="2f6465762f72746300", 0xa8081, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f00004af000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r3 = creat(&(0x7f000030d000-0x8)="2e2f66696c653000", 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000074000)={0x11, 0x0}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) [ 571.250087] ? lockdep_sys_exit+0x47/0xf0 [ 571.250098] ? syscall_return_slowpath+0x2ad/0x550 [ 571.250116] ? sysret32_from_system_call+0x5/0x3b [ 571.250135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.250158] entry_SYSENTER_compat+0x51/0x60 [ 571.250164] RIP: 0023:0xf7fb4c79 2017/12/02 09:13:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x7ff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) openat$ptmx(0xffffffffffffff9c, &(0x7f0000456000)="2f6465762f70746d7800", 0x414002, 0x0) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 571.250174] RSP: 002b:00000000f77b008c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 571.250184] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 571.250189] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 571.250195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.250199] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.250205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.306656] FAULT_INJECTION: forcing a failure. [ 571.306656] name failslab, interval 1, probability 0, space 0, times 0 [ 571.306677] CPU: 1 PID: 18293 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 571.306684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.306688] Call Trace: [ 571.306705] dump_stack+0x194/0x257 [ 571.306721] ? arch_local_irq_restore+0x53/0x53 [ 571.306735] ? do_raw_spin_trylock+0x190/0x190 [ 571.306761] should_fail+0x8c0/0xa40 [ 571.306780] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.306800] ? copy_overflow+0x20/0x20 [ 571.306817] ? find_held_lock+0x39/0x1d0 [ 571.306843] ? lock_downgrade+0x980/0x980 [ 571.306874] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 571.306890] ? rcu_note_context_switch+0x710/0x710 [ 571.306913] should_failslab+0xec/0x120 [ 571.306925] kmem_cache_alloc+0x47/0x760 [ 571.306939] ? schedule+0xf5/0x430 [ 571.306947] ? __lock_is_held+0xbc/0x140 [ 571.306962] getname_flags+0xcb/0x580 [ 571.306980] user_path_at_empty+0x2d/0x50 [ 571.306995] path_setxattr+0xcd/0x1e0 [ 571.307023] ? setxattr+0x3e0/0x3e0 [ 571.307037] ? exit_to_usermode_loop+0x198/0x310 [ 571.307056] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 571.307076] SyS_setxattr+0x3b/0x50 [ 571.307091] ? vfs_getxattr_alloc+0x270/0x270 [ 571.307103] do_fast_syscall_32+0x3ee/0xf9d [ 571.307125] ? do_int80_syscall_32+0x9d0/0x9d0 [ 571.307143] ? lockdep_sys_exit+0x47/0xf0 [ 571.307153] ? syscall_return_slowpath+0x2ad/0x550 [ 571.307169] ? sysret32_from_system_call+0x5/0x3b [ 571.307187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.307208] entry_SYSENTER_compat+0x51/0x60 [ 571.307215] RIP: 0023:0xf7f34c79 [ 571.307219] RSP: 002b:00000000f770f08c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 571.307228] RAX: ffffffffffffffda RBX: 0000000020d2dff8 RCX: 000000002045a000 [ 571.307233] RDX: 0000000020766000 RSI: 0000000000000005 RDI: 0000000000000000 [ 571.307238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.307243] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.307248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.342201] FAULT_INJECTION: forcing a failure. [ 571.342201] name failslab, interval 1, probability 0, space 0, times 0 [ 571.342211] CPU: 0 PID: 18311 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 571.342216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.342219] Call Trace: [ 571.342233] dump_stack+0x194/0x257 [ 571.342250] ? arch_local_irq_restore+0x53/0x53 [ 571.342261] ? __save_stack_trace+0x7e/0xd0 [ 571.342289] should_fail+0x8c0/0xa40 [ 571.342297] ? check_noncircular+0x20/0x20 [ 571.342311] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.342321] ? kasan_kmalloc+0xad/0xe0 [ 571.342330] ? __kmalloc_track_caller+0x15e/0x760 [ 571.342337] ? memdup_user+0x2c/0x90 [ 571.342344] ? strndup_user+0x62/0xb0 [ 571.342351] ? copy_mount_string+0x24/0x40 [ 571.342359] ? compat_SyS_mount+0x2d/0x1070 [ 571.342368] ? do_fast_syscall_32+0x3ee/0xf9d [ 571.342384] ? find_held_lock+0x39/0x1d0 [ 571.342413] ? lock_downgrade+0x980/0x980 [ 571.342451] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 571.342467] ? rcu_note_context_switch+0x710/0x710 [ 571.342478] ? __check_object_size+0x25d/0x4f0 [ 571.342498] should_failslab+0xec/0x120 [ 571.342511] __kmalloc_track_caller+0x5f/0x760 [ 571.342527] ? strncpy_from_user+0x430/0x430 [ 571.342535] ? strndup_user+0x62/0xb0 [ 571.342545] ? _copy_from_user+0x99/0x110 [ 571.342561] memdup_user+0x2c/0x90 [ 571.342574] strndup_user+0x62/0xb0 [ 571.342588] copy_mount_string+0x24/0x40 [ 571.342598] compat_SyS_mount+0x49/0x1070 [ 571.342613] ? show_fd_locks+0x2c0/0x2c0 [ 571.342625] do_fast_syscall_32+0x3ee/0xf9d [ 571.342652] ? do_int80_syscall_32+0x9d0/0x9d0 [ 571.342672] ? lockdep_sys_exit+0x47/0xf0 [ 571.342682] ? syscall_return_slowpath+0x2ad/0x550 [ 571.342700] ? sysret32_from_system_call+0x5/0x3b [ 571.342719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.342742] entry_SYSENTER_compat+0x51/0x60 [ 571.342749] RIP: 0023:0xf7fb4c79 [ 571.342754] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 571.342763] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 571.342768] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 571.342773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.342778] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.342783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.402234] FAULT_INJECTION: forcing a failure. [ 571.402234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 571.402247] CPU: 1 PID: 18321 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 571.402254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.402257] Call Trace: [ 571.402275] dump_stack+0x194/0x257 [ 571.402291] ? arch_local_irq_restore+0x53/0x53 [ 571.402325] should_fail+0x8c0/0xa40 [ 571.402342] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.402371] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 571.402394] ? lock_downgrade+0x980/0x980 [ 571.402405] ? check_noncircular+0x20/0x20 [ 571.402435] ? check_noncircular+0x20/0x20 [ 571.402448] ? check_noncircular+0x20/0x20 [ 571.402464] ? lock_downgrade+0x980/0x980 [ 571.402471] ? should_fail+0x23b/0xa40 [ 571.402478] ? __lock_is_held+0xbc/0x140 [ 571.402500] __alloc_pages_nodemask+0x338/0xd80 [ 571.402521] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 571.402528] ? find_held_lock+0x39/0x1d0 [ 571.402556] ? lock_downgrade+0x980/0x980 [ 571.402604] ? rcu_note_context_switch+0x710/0x710 [ 571.402623] cache_grow_begin+0x72/0x3f0 [ 571.402642] kmem_cache_alloc+0x403/0x760 [ 571.402676] getname_flags+0xcb/0x580 [ 571.402696] user_path_at_empty+0x2d/0x50 [ 571.402711] path_setxattr+0xcd/0x1e0 [ 571.402734] ? setxattr+0x3e0/0x3e0 [ 571.402744] ? __do_page_fault+0x3d6/0xc90 [ 571.402762] ? SyS_read+0x220/0x220 [ 571.402784] SyS_setxattr+0x3b/0x50 [ 571.402797] ? vfs_getxattr_alloc+0x270/0x270 [ 571.402810] do_fast_syscall_32+0x3ee/0xf9d [ 571.402831] ? do_int80_syscall_32+0x9d0/0x9d0 [ 571.402850] ? lockdep_sys_exit+0x47/0xf0 [ 571.402861] ? syscall_return_slowpath+0x2ad/0x550 [ 571.402879] ? sysret32_from_system_call+0x5/0x3b [ 571.402898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.402920] entry_SYSENTER_compat+0x51/0x60 [ 571.402927] RIP: 0023:0xf7f34c79 [ 571.402932] RSP: 002b:00000000f770f08c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 571.402941] RAX: ffffffffffffffda RBX: 0000000020d2dff8 RCX: 000000002045a000 [ 571.402945] RDX: 0000000020766000 RSI: 0000000000000005 RDI: 0000000000000000 [ 571.402950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.402955] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.402959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.479695] FAULT_INJECTION: forcing a failure. [ 571.479695] name failslab, interval 1, probability 0, space 0, times 0 [ 571.479707] CPU: 1 PID: 18344 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 571.479712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.479716] Call Trace: [ 571.479729] dump_stack+0x194/0x257 [ 571.479745] ? arch_local_irq_restore+0x53/0x53 [ 571.479759] ? depot_save_stack+0x12c/0x490 [ 571.479778] should_fail+0x8c0/0xa40 [ 571.479792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.479801] ? copy_mount_string+0x24/0x40 [ 571.479812] ? do_fast_syscall_32+0x3ee/0xf9d [ 571.479820] ? entry_SYSENTER_compat+0x51/0x60 [ 571.479842] ? find_held_lock+0x39/0x1d0 [ 571.479868] ? lock_downgrade+0x980/0x980 [ 571.479900] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 571.479911] ? __check_object_size+0x25d/0x4f0 [ 571.479922] ? rcu_note_context_switch+0x710/0x710 [ 571.479944] should_failslab+0xec/0x120 [ 571.479956] kmem_cache_alloc_trace+0x4b/0x750 [ 571.479966] ? kasan_check_write+0x14/0x20 [ 571.479976] ? _copy_from_user+0x99/0x110 [ 571.479996] copy_mount_options+0x5f/0x2e0 [ 571.480022] compat_SyS_mount+0x65/0x1070 [ 571.480043] ? show_fd_locks+0x2c0/0x2c0 [ 571.480059] do_fast_syscall_32+0x3ee/0xf9d [ 571.480083] ? do_int80_syscall_32+0x9d0/0x9d0 [ 571.480102] ? lockdep_sys_exit+0x47/0xf0 [ 571.480113] ? syscall_return_slowpath+0x2ad/0x550 [ 571.480129] ? sysret32_from_system_call+0x5/0x3b [ 571.480147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.480167] entry_SYSENTER_compat+0x51/0x60 [ 571.480175] RIP: 0023:0xf7fb4c79 [ 571.480180] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 571.480188] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 571.480192] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 571.480197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.480202] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.480206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.564358] FAULT_INJECTION: forcing a failure. [ 571.564358] name failslab, interval 1, probability 0, space 0, times 0 [ 571.564370] CPU: 1 PID: 18363 Comm: syz-executor7 Not tainted 4.15.0-rc1+ #114 [ 571.564376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.564379] Call Trace: [ 571.564394] dump_stack+0x194/0x257 [ 571.564408] ? arch_local_irq_restore+0x53/0x53 [ 571.564420] ? rcutorture_record_progress+0x10/0x10 [ 571.564445] should_fail+0x8c0/0xa40 [ 571.564460] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.564474] ? __save_stack_trace+0x7e/0xd0 [ 571.564495] ? find_held_lock+0x39/0x1d0 [ 571.564523] ? __lock_is_held+0xbc/0x140 [ 571.564554] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 571.564564] ? check_stack_object+0x140/0x140 [ 571.564573] ? rcu_note_context_switch+0x710/0x710 [ 571.564595] should_failslab+0xec/0x120 [ 571.564608] kmem_cache_alloc_node_trace+0x5a/0x760 [ 571.564619] ? strncpy_from_user+0x323/0x430 [ 571.564643] __kmalloc_node+0x33/0x70 [ 571.564657] kvmalloc_node+0x99/0xd0 [ 571.564675] setxattr+0x143/0x3e0 [ 571.564690] ? vfs_setxattr+0xe0/0xe0 [ 571.564698] ? lock_acquire+0x1d5/0x580 [ 571.564709] ? mnt_want_write+0x3f/0xb0 [ 571.564734] ? __lock_is_held+0xbc/0x140 [ 571.564752] ? __mnt_want_write+0x25c/0x370 [ 571.564768] ? do_umount+0xdb0/0xdb0 [ 571.564782] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 571.564796] ? __sb_start_write+0x203/0x290 [ 571.564822] path_setxattr+0x198/0x1e0 [ 571.564840] ? setxattr+0x3e0/0x3e0 [ 571.564849] ? __do_page_fault+0x3d6/0xc90 [ 571.564861] ? SyS_read+0x220/0x220 [ 571.564877] SyS_setxattr+0x3b/0x50 [ 571.564887] ? vfs_getxattr_alloc+0x270/0x270 [ 571.564899] do_fast_syscall_32+0x3ee/0xf9d [ 571.564918] ? do_int80_syscall_32+0x9d0/0x9d0 [ 571.564937] ? lockdep_sys_exit+0x47/0xf0 [ 571.564946] ? syscall_return_slowpath+0x2ad/0x550 [ 571.564962] ? sysret32_from_system_call+0x5/0x3b [ 571.564980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.564999] entry_SYSENTER_compat+0x51/0x60 [ 571.565008] RIP: 0023:0xf7f34c79 [ 571.565012] RSP: 002b:00000000f770f08c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 571.565021] RAX: ffffffffffffffda RBX: 0000000020d2dff8 RCX: 000000002045a000 [ 571.565025] RDX: 0000000020766000 RSI: 0000000000000005 RDI: 0000000000000000 [ 571.565030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.565034] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.565038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.594723] FAULT_INJECTION: forcing a failure. [ 571.594723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 571.594744] CPU: 0 PID: 18375 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 571.594756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.594764] Call Trace: [ 571.594787] dump_stack+0x194/0x257 [ 571.594829] ? arch_local_irq_restore+0x53/0x53 [ 571.594898] should_fail+0x8c0/0xa40 [ 571.594942] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.595007] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 571.595020] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 571.595041] ? is_bpf_text_address+0xa4/0x120 [ 571.595053] ? kernel_text_address+0x102/0x140 [ 571.595067] ? __kernel_text_address+0xd/0x40 [ 571.595079] ? unwind_get_return_address+0x61/0xa0 [ 571.595090] ? __save_stack_trace+0x7e/0xd0 [ 571.595112] ? depot_save_stack+0x12c/0x490 [ 571.595125] ? check_noncircular+0x20/0x20 [ 571.595139] ? check_noncircular+0x20/0x20 [ 571.595153] ? should_fail+0x23b/0xa40 [ 571.595187] __alloc_pages_nodemask+0x338/0xd80 [ 571.595212] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 571.595218] ? find_held_lock+0x39/0x1d0 [ 571.595245] ? lock_downgrade+0x980/0x980 [ 571.595284] ? __check_object_size+0x25d/0x4f0 [ 571.595295] ? rcu_note_context_switch+0x710/0x710 [ 571.595312] cache_grow_begin+0x72/0x3f0 [ 571.595331] kmem_cache_alloc_trace+0x3f3/0x750 [ 571.595341] ? kasan_check_write+0x14/0x20 [ 571.595367] copy_mount_options+0x5f/0x2e0 [ 571.595386] compat_SyS_mount+0x65/0x1070 [ 571.595400] ? show_fd_locks+0x2c0/0x2c0 [ 571.595413] do_fast_syscall_32+0x3ee/0xf9d [ 571.595435] ? do_int80_syscall_32+0x9d0/0x9d0 [ 571.595454] ? lockdep_sys_exit+0x47/0xf0 [ 571.595464] ? syscall_return_slowpath+0x2ad/0x550 [ 571.595482] ? sysret32_from_system_call+0x5/0x3b [ 571.595500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.595523] entry_SYSENTER_compat+0x51/0x60 [ 571.595530] RIP: 0023:0xf7fb4c79 [ 571.595535] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 571.595545] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 571.595550] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 571.595555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.595559] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.595564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.645748] QAT: Invalid ioctl [ 571.652252] QAT: Invalid ioctl [ 571.741508] FAULT_INJECTION: forcing a failure. [ 571.741508] name failslab, interval 1, probability 0, space 0, times 0 [ 571.741517] CPU: 1 PID: 18414 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 571.741523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.741527] Call Trace: [ 571.741542] dump_stack+0x194/0x257 [ 571.741560] ? arch_local_irq_restore+0x53/0x53 [ 571.741590] should_fail+0x8c0/0xa40 [ 571.741608] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 571.741626] ? find_held_lock+0x39/0x1d0 [ 571.741645] ? find_held_lock+0x39/0x1d0 [ 571.741680] ? lock_downgrade+0x980/0x980 [ 571.741719] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 571.741738] ? rcu_note_context_switch+0x710/0x710 [ 571.741764] should_failslab+0xec/0x120 [ 571.741780] kmem_cache_alloc+0x47/0x760 [ 571.741791] ? mm_fault_error+0x2c0/0x2c0 [ 571.741802] ? find_held_lock+0x39/0x1d0 [ 571.741819] getname_flags+0xcb/0x580 [ 571.741827] ? do_page_fault+0xee/0x720 [ 571.741842] user_path_at_empty+0x2d/0x50 [ 571.741856] do_mount+0x15f/0x2bb0 [ 571.741877] ? copy_mount_string+0x40/0x40 [ 571.741886] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 571.741898] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 571.741917] ? retint_kernel+0x10/0x10 [ 571.741940] ? copy_mount_options+0x18b/0x2e0 [ 571.741952] ? copy_mount_options+0x190/0x2e0 [ 571.741962] ? copy_mount_options+0x1f4/0x2e0 [ 571.741979] compat_SyS_mount+0xd0/0x1070 [ 571.741993] ? show_fd_locks+0x2c0/0x2c0 [ 571.742004] do_fast_syscall_32+0x3ee/0xf9d [ 571.742024] ? do_int80_syscall_32+0x9d0/0x9d0 [ 571.742043] ? lockdep_sys_exit+0x47/0xf0 [ 571.742052] ? syscall_return_slowpath+0x2ad/0x550 [ 571.742067] ? sysret32_from_system_call+0x5/0x3b [ 571.742085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.742104] entry_SYSENTER_compat+0x51/0x60 [ 571.742111] RIP: 0023:0xf7fb4c79 [ 571.742115] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 571.742124] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 571.742128] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 571.742132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.742137] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.742141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.303264] audit: type=1326 audit(1512206037.977:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18267 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 [ 573.303279] audit: type=1326 audit(1512206038.033:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18314 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:14:00 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000374000-0x8)="2e2f66696c653000", 0x600000, 0x84) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00009ed000-0x8c)={0x2, 0x1ff, 0xb06, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) keyctl$set_timeout(0xf, r1, 0x6) 2017/12/02 09:14:00 executing program 4: geteuid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000237000-0xb)="706b6373375f7465737400", &(0x7f0000a64000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000456000)="b48a09246ef27b5c6c35b10e30173f14ff10eb3029a3b11db79aef8ff64799f2efdde17a327883e998f4497e84efac05f0da91b8be6a2d0b79", 0x39, 0xfffffffffffffff8) request_key(&(0x7f000024e000)="69505f6c65676163791f", &(0x7f0000c48000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00002fd000-0x7)="2a70726f630000", r0) 2017/12/02 09:14:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000526000)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:14:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000bbd000-0x8)="2e2f66696c653000", &(0x7f00000b3000)=@known="73797374656d2e706f7369785f61636c5f61636365737300") r1 = userfaultfd(0x4) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000ec0000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x3, 0x84000) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x401) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2017/12/02 09:14:00 executing program 6 (fault-call:9 fault-nth:5): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:14:00 executing program 3: r0 = perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000421000-0xc)={0x7, r0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000f9e000)={0xc4ed, 0x1ff, 0xc, 0x5, 0xbd, 0x3, 0x7, 0x100000001, 0x0}, &(0x7f00002b1000)=0x20) pwrite64(r0, &(0x7f0000a1a000)="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", 0x1000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000c68000-0x6)={r4, 0x0}, 0x6) 2017/12/02 09:14:00 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6375736500", 0x101000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x96, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f000039b000)={0x0, 0x0}) write$sndseq(r0, &(0x7f00006f3000)=[{0x4, 0x200, 0x101, 0x1ff, @time={0x0, 0x1c9c380}, {0x8, 0x2}, {0x8b, 0x0}, @time=@time={r1, r2+30000000}}, {0x80000000, 0x2, 0x5, 0x5, @tick=0x3f, {0x2, 0x26}, {0x1, 0xfffffffffffffc97}, @raw32={[0x7fffffff, 0x1, 0x4c]}}, {0x100000001, 0x4, 0x0, 0x8, @tick=0x6535, {0x2, 0x9}, {0x26e, 0x5}, @note={0x6, 0x8, 0x8, 0x100, 0x4}}, {0xffffffff, 0x6, 0xfffffffffffffff9, 0x478ad75, @tick=0x9, {0x8000, 0x3ff}, {0x3f, 0x5}, @queue={0x7, {0x6, 0xfffffffffffffe00}}}, {0x2, 0x8, 0x8, 0x4, @time={0x0, 0x0}, {0x3, 0x10001}, {0xff, 0x5}, @queue={0x8, {0x6, 0xf9}}}, {0x7f, 0x7, 0x8000, 0x9, @tick=0x8000, {0x7, 0x5}, {0xfbe, 0x20c}, @note={0x7, 0x6, 0x1, 0x10000, 0xfffffffffffffff8}}, {0x0, 0x2, 0x7, 0x6, @tick=0x8001, {0x81, 0x1f}, {0x100000001, 0x80}, @result={0x1ff, 0x1ff}}, {0x8000, 0x9, 0x4, 0x8001, @tick=0x100000000, {0x3c9e, 0x1}, {0x100, 0xffff}, @ext={0x6d, &(0x7f00005cd000)="dc049ee1eb6fd10165fea0b2c06194371a9c6aa935784e450f4b4fcc8bc60732e4f5a629f16646e3e20a0f0964c4dd6e43fd79fa4c8d398c4e01c5d2c173ca71d7b1e33be1d30519f8536ee289b26f9414f458f8184ec756aac99bf7dc22a960ed42cbee70790970321ce560a0"}}, {0xffffffffffff9d00, 0x3ff, 0x7, 0x5, @time={0x0, 0x0}, {0x2, 0x9}, {0x4, 0x8}, @addr={0xffffffffffff0001, 0x2}}], 0xfc) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00004f6000)="2f6465762f76637300", 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00003d9000)={0x0, 0x5, 0x1, 0x3f, 0x80000001, 0x7, 0x1, 0xffff, {0x0, @in6={{0xa, 0x1, 0x40, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x131}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000000, 0x4, 0x1, 0x1, 0x7}}, &(0x7f000056e000-0x4)=0xb8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f000048c000-0x10)={r4, 0x1000, 0x7fffffff, 0x7}, &(0x7f0000c56000)=0x10) 2017/12/02 09:14:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f000047f000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x280081) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7f) r1 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r2, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r3 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r4 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f000019a000-0xc)={0x0, 0x0, 0x0}, 0xc) fcntl$setownex(r3, 0xf, &(0x7f0000b93000-0x8)={0x0, r5}) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r6, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r6, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r1, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) [ 573.303291] audit: type=1326 audit(1512206038.136:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=18314 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1dc79 code=0x0 2017/12/02 09:14:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000469000-0x8)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000dab000-0x4)=0xfbffffffffffffff, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mmap(&(0x7f0000000000/0xee9000)=nil, 0xee9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x802, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000766000-0x4)=0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000b31000)=0x0, 0x4) write(r3, &(0x7f0000815000)="240000001a0025f00000000401111f0e0a0b20000000bf0000e809ec0800030005000000", 0x24) mmap(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000ee9000)={0x9, 0x4, 0xa90, 0x0, 0x45a7}, 0x14) mmap(&(0x7f0000eea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000eeb000-0xc)="2f6465762f72666b696c6c00", 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00001e5000-0xc)={0x0, 0xd0, &(0x7f0000387000-0x57)="fdc560281fcb2df9761a5b9b71095e06db1014a857be4d17432e1e2a2e5e4f3fd4df728fcee8b86a6f4d383864ae54361ac1c11893a41ebf7575374f828adaf81d6a0d71328ee08175e0ffc3aa7bcd546870099728991ebc31461d6cb239f66a28a86ce3480e4d856965ca2152992cccc63c5bd6de1979577d56f13340e4db8893c913ae158899f30e6a87075e11df4206cbb1650df4045ea0710729a6bed49b4d0c7e655f82d1830b5ba01568b837993e2483ba30dc511a02aac10d8c9e256fef775d3832ae2c5ffac407462aa37301"}) r5 = gettid() fstat(r4, &(0x7f0000792000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000918000)={0x6, 0x9024, r5, 0x2, r6, 0x8, 0x54, 0x5}) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r7 = fcntl$dupfd(r1, 0x0, r2) mq_open(&(0x7f0000866000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0xc6, &(0x7f000091b000-0x20)={0x3, 0x4b11, 0x0, 0x10000, 0x7fffffff, 0x0, 0x9, 0xffffffff}) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r7, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) 2017/12/02 09:14:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000090000-0x10)="2f6465762f73657175656e6365723200", 0x2, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000e60000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap$binder(&(0x7f0000994000/0x4000)=nil, 0x4000, 0x1, 0x16011, r0, 0x0) mmap(&(0x7f0000df8000/0x1000)=nil, 0x1000, 0x2, 0x1010, r0, 0x0) 2017/12/02 09:14:00 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) write(r0, &(0x7f00003cb000-0xac)="9dd76ad77e2d815f1b8018aa33ae3d4d32e67bf48b35ba8c99b7bc450728b3176724adeab0ea3144ab975f4fb921bd3a873e27619b36d727a59e9c42578eef55d5bbe81ff9d935dd52ab8c4b5a7f9176feb7305382a1f441de825bfee197199efe1853950c35afbd74f4065d0f696c3a39f288a418d620d6406dab6b65f15a79e83c6025571eadf085ad2093834587eb6a7f3d04efd4b7683c84f82448f9df9ba8fff55605592c2d640c9b91", 0xac) 2017/12/02 09:14:00 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000afc000)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000208000-0x4)=0x80, 0x80800) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000e39000)=0x0, &(0x7f0000781000-0x4)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:14:00 executing program 7: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x5, 0xcb) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000576000)=0x0, &(0x7f0000b3d000)=0x4) r1 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) sysinfo(&(0x7f00000a3000-0x27)="000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(r2, &(0x7f0000001000-0x9)={0x1f, {0x5, 0x3, 0x9, 0x100000001, 0x9a, 0x8}, 0x6}, 0x9) [ 573.445276] sg_write: 45 callbacks suppressed 2017/12/02 09:14:00 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000e76000-0xb)="2f6465762f6877726e6700", 0x4000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ff9000-0x1c)={0x1, 0x5, 0xfd, 0xfffffffffffffffb, 0x0, r0, 0x9}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000700000-0x18)={r1, &(0x7f00009f7000-0x1000)="", &(0x7f0000cb7000-0xa1)=""}, 0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000460000)={0x0, 0x7ff, 0x30}, &(0x7f0000f21000)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f000059c000-0xa0)={r2, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x2, 0x3, 0x6, 0x8}, 0xa0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000782000-0xc)={0x0, 0x0, 0x0}, 0xc) ioctl$TUNSETOWNER(r0, 0x400454cc, &(0x7f0000fc1000)=r3) clock_nanosleep(0x0, 0x0, &(0x7f0000ec0000)={0x77359400, 0x0}, 0x0) perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f000045c000-0xc)="2f6465762f6175746f667300", 0x2000, 0x0) sendmsg$unix(r4, &(0x7f0000faa000-0x1c)={&(0x7f00002ee000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f00000b1000-0x30)=[{&(0x7f000089c000)="592f17a852245a7cbc10f5661909c24101c75a6bc7313e006b185899de564ea0173006ade842be43d8ecf80d82f4ed7b8d341fde1cbead37a4031923155b07d3aa2fe5fc55a71de007e85c80b2de0ee2d4e0b0ddf4116dd620f8faa1d916c31e1a82b8ee739a6eee5b6c81bde401f01bc7498c7b14c9f9ac8cc0eecb6e11a0f1f42ddef5094ed358da5e447294e7d90d0958f27057ffa62e0d6f8fd45a3ab6a1e61b2dfdcc48e69a3c968614e7a94abb86bd0ffa3c305d6a2745d70d0d784468ac21541fe75a54d3d673793957756ad2770c3fa7220ffd3601064d899d3528120bf56c34cdb19f0e2a8f86f1d9", 0xed}, {&(0x7f0000348000)="a2c12800524c78163fb43c58945d178c08f686de64f8003a654419bcf751bddcc2a0b1ec3c94166b00f1ff513ccbb87b256f9e4eda4cc3f6a9e2a01ee03f8e61bb1fbfba507ff6e5c90eb5ee155a049bf4dc05cbe6a7941621a1305d920a64b59d590d03885c4e1888fd1a963709c297e421d1f2140f7ed0eeb14ce6fd9c6bb9073b1abf979734cf809f4d20", 0x8c}, {&(0x7f0000cc8000-0xb)="50ca80d602b96aa0704dfa", 0xb}, {&(0x7f0000e2f000-0xb5)="60e1cc00d9397ac58a3e1b884b568ad8eb4c8adce89a084791a042de54fe8352abb7f9d0cc80411d7337626c79c1444e219dcc93414fea76a94fd0d35802f70f0806532e09b3c525c5a3cfe963ee0af7d775919e2a42e5d0e49b16bf2caaf3848863bdd4bde7047af83638e8e805c69449cc19296c4f57ad60a7be86b890754456ab3583a6f1bf1265ac3f3dd8a84741deb5db104c7ea885e9249a36aa54242465f4533478f15ab57d31ba5e21dbfd95e30f0f0993", 0xb5}, {&(0x7f00009a9000-0xcb)="2fb08ea3231eb79d741cb5d4757c814beb3a7b5ef07e687f446d447fa206ddd839d11c03ab5310f38027d669cd089a8615cd7266ef7dd90370842ddd02933b9b81f7c611270e77b87b06d28db6cc54cdca26ad9d205d7dc2d4e836ba2da49820f068fc347fea5922abd4e33be25d55be5d600cecf6ed19a6543d4d3e251f63532ab5053c58171a4a58542f1a59884a40c40036f8005edb5e2d8c4d25590d9fb0d842565e62f67ea39f0eba163f0a9a3cfdda59a7c0cd6efdfa6b43fceb2342f1bfa5f8ff02c5a637406e43", 0xcb}, {&(0x7f0000246000-0x6b)="a70cb05c9fab7f0bf6202a1788cf7fb74918506951dbebdd17990845bb1136a62c1688f2d505027ec4ffe233dffdad85ebc49c2596355b881fd3283a5be03be2bcb885290282b09eae81faed3274d308c8fc1c0fddbafc95b06e357ef443a990b5f68ca1f92e5db676d1b9", 0x6b}], 0x6, 0x0, 0x0, 0x20000000}, 0x4000000) 2017/12/02 09:14:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{r0, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:14:00 executing program 6 (fault-call:9 fault-nth:6): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:14:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000e2d000)="69645f6c656761637900", &(0x7f0000856000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) [ 573.445293] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 573.445293] program syz-executor2 not setting count and/or reply_len properly [ 573.461641] FAULT_INJECTION: forcing a failure. [ 573.461641] name failslab, interval 1, probability 0, space 0, times 0 2017/12/02 09:14:00 executing program 1: r0 = getpid() perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) [ 573.461651] CPU: 1 PID: 18446 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 573.461656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.461660] Call Trace: [ 573.461678] dump_stack+0x194/0x257 [ 573.461697] ? arch_local_irq_restore+0x53/0x53 [ 573.461732] should_fail+0x8c0/0xa40 [ 573.461750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 573.461769] ? find_held_lock+0x39/0x1d0 [ 573.461787] ? find_held_lock+0x39/0x1d0 [ 573.461815] ? lock_downgrade+0x980/0x980 [ 573.461850] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 573.461870] ? rcu_note_context_switch+0x710/0x710 [ 573.461899] should_failslab+0xec/0x120 [ 573.461913] kmem_cache_alloc+0x47/0x760 [ 573.461923] ? mm_fault_error+0x2c0/0x2c0 [ 573.461949] getname_flags+0xcb/0x580 [ 573.461959] ? do_page_fault+0xee/0x720 [ 573.461976] user_path_at_empty+0x2d/0x50 [ 573.461992] do_mount+0x15f/0x2bb0 [ 573.462012] ? copy_mount_string+0x40/0x40 [ 573.462023] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 573.462036] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 573.462056] ? retint_kernel+0x10/0x10 [ 573.462077] ? copy_mount_options+0x18b/0x2e0 [ 573.462090] ? copy_mount_options+0x190/0x2e0 [ 573.462101] ? copy_mount_options+0x1f4/0x2e0 [ 573.462119] compat_SyS_mount+0xd0/0x1070 [ 573.462133] ? show_fd_locks+0x2c0/0x2c0 [ 573.462145] do_fast_syscall_32+0x3ee/0xf9d [ 573.462167] ? do_int80_syscall_32+0x9d0/0x9d0 [ 573.462181] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 573.462194] ? lockdep_sys_exit+0x47/0xf0 [ 573.462205] ? syscall_return_slowpath+0x2ad/0x550 [ 573.462221] ? sysret32_from_system_call+0x5/0x3b [ 573.462241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.462261] entry_SYSENTER_compat+0x51/0x60 [ 573.462269] RIP: 0023:0xf7fb4c79 [ 573.462273] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 573.462282] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 573.462287] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 573.462292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.462296] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 573.462301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.539860] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 573.539860] program syz-executor0 not setting count and/or reply_len properly [ 573.581722] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 573.581722] program syz-executor0 not setting count and/or reply_len properly [ 573.597408] FAULT_INJECTION: forcing a failure. [ 573.597408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 573.597417] CPU: 0 PID: 18473 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 573.597422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.597426] Call Trace: [ 573.597440] dump_stack+0x194/0x257 [ 573.597458] ? arch_local_irq_restore+0x53/0x53 [ 573.597488] should_fail+0x8c0/0xa40 [ 573.597506] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 573.597533] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 573.597540] ? find_held_lock+0x39/0x1d0 [ 573.597556] ? check_noncircular+0x20/0x20 [ 573.597571] ? lock_downgrade+0x980/0x980 [ 573.597583] ? __free_insn_slot+0x5c0/0x5c0 [ 573.597609] ? check_noncircular+0x20/0x20 [ 573.597619] ? find_held_lock+0x39/0x1d0 [ 573.597629] ? should_fail+0x23b/0xa40 [ 573.597651] __alloc_pages_nodemask+0x338/0xd80 [ 573.597658] ? find_held_lock+0x39/0x1d0 [ 573.597674] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 573.597680] ? find_held_lock+0x39/0x1d0 [ 573.597705] ? lock_downgrade+0x980/0x980 [ 573.597745] ? rcu_note_context_switch+0x710/0x710 [ 573.597766] cache_grow_begin+0x72/0x3f0 [ 573.597783] kmem_cache_alloc+0x403/0x760 [ 573.597792] ? mm_fault_error+0x2c0/0x2c0 [ 573.597816] getname_flags+0xcb/0x580 [ 573.597825] ? do_page_fault+0xee/0x720 [ 573.597841] user_path_at_empty+0x2d/0x50 [ 573.597854] do_mount+0x15f/0x2bb0 [ 573.597875] ? copy_mount_string+0x40/0x40 [ 573.597885] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 573.597897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 573.597915] ? retint_kernel+0x10/0x10 [ 573.597938] ? copy_mount_options+0x18b/0x2e0 [ 573.597950] ? copy_mount_options+0x190/0x2e0 [ 573.597960] ? copy_mount_options+0x1f4/0x2e0 [ 573.597978] compat_SyS_mount+0xd0/0x1070 [ 573.597991] ? show_fd_locks+0x2c0/0x2c0 [ 573.598001] do_fast_syscall_32+0x3ee/0xf9d [ 573.598022] ? do_int80_syscall_32+0x9d0/0x9d0 [ 573.598040] ? lockdep_sys_exit+0x47/0xf0 [ 573.598049] ? syscall_return_slowpath+0x2ad/0x550 [ 573.598064] ? sysret32_from_system_call+0x5/0x3b [ 573.598081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.598101] entry_SYSENTER_compat+0x51/0x60 [ 573.598107] RIP: 0023:0xf7fb4c79 [ 573.598117] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 573.598128] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 2017/12/02 09:14:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000f4c000)=0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x2, 0xffffffffffffffff) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f000035c000)=0x0, &(0x7f0000420000-0x4)=0x4) 2017/12/02 09:14:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00006d0000)="2f6465762f72746300", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f000056f000-0x5c)={0x8, 0x0, {0x3, 0x1, 0x6cf, 0x3, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) gettid() 2017/12/02 09:14:00 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x480401, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000107000-0x4)=0x7, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:14:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f00006fa000-0x6)="6c6f676f6e00", &(0x7f00006ea000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00001a8000-0x1)="00", 0xfffffffffffffffc) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00004bb000-0x7)="2a70726f632e00", r0) 2017/12/02 09:14:00 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) setns(r0, 0xc000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x4000, 0x0, &(0x7f0000ae0000/0x2000)=nil}) 2017/12/02 09:14:00 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000c60000)={0x3, {{0x2, 0x2, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:14:00 executing program 6 (fault-call:9 fault-nth:7): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:14:00 executing program 7: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000ace000-0x30)={&(0x7f0000a86000)=[0x0, 0x0, 0x0], &(0x7f00000df000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000f81000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000858000-0x18)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0}) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 573.598135] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 573.598141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.598147] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 573.598153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 09:14:00 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e6365723200", 0xa40, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000001000-0xa0)={0x0, @in={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, 0x100000000, 0x7fffffff, 0x80000000, 0xf96a}, &(0x7f0000000000)=0xa0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000ec6000)=r1, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) pipe2(&(0x7f000039a000)={0x0, 0x0}, 0x80800) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000f07000)=0x9, 0x4) 2017/12/02 09:14:00 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000bad000)="2f6465762f6175746f667300", 0x410000, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000d0d000)="2f6465762f72666b696c6c00", 0x20002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000c55000)={r0, r1, 0x7, 0x0, r2}, 0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000151000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000661000)="00", 0x0) [ 574.079737] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 574.079737] program syz-executor2 not setting count and/or reply_len properly [ 574.110495] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; 2017/12/02 09:14:00 executing program 3: r0 = dup(0xffffffffffffff9c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00007ae000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0xcd35, 0x3, "c7c9fb5e849fe3d2ef12fea0fe91c43a621358b222785c0d66357750c07105d023b82f1b802d1aa4e491734f53bdd2aac99c90f466535afc6d5cce1b4071a223f9b67bf5b5bb8509699ea8207b2bec650880d28cd06a81d77c7fc89d866761d2e01ce912009a434eff7c2ca03538513f6a3bd56174ca533c11e10eb68527875e589488fd6a299bb0b47543857e1df13cf32f7eda3a4f9a7ff34936d42c096ab9071711d0ad664f9fe05046e01f68f7be9ac4cc958523bcedcf97cced055a77937b62e824b930ac6554a04b9135ebd667c428f51b8a33d839104b9632c61f38aee1ace8e793b1fbae27884910f1faed21"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e6365723200", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000000)={0x7f, 0xe000, 0x8, 0x1, 0x0}) perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) [ 574.110495] program syz-executor0 not setting count and/or reply_len properly 2017/12/02 09:14:00 executing program 1: r0 = perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000394000-0x8)={0x0, 0x4}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r1, 0x2}, 0x8) r2 = syz_open_dev$vcsn(&(0x7f00007ea000)="2f6465762f7663732300", 0x0, 0x10000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x5, &(0x7f000024a000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) timerfd_create(0x2, 0x800) 2017/12/02 09:14:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00003a1000-0x70)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r2, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:14:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000eb8000)="2f6465762f6877726e6700", 0x8080, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000f2a000-0x138)={{0x7000, 0x0, 0xf, 0x95f, 0x1, 0x9, 0x5, 0xffffffff, 0x0, 0x101, 0x3ff, 0x7, 0x0}, {0x5000, 0xf002, 0x0, 0x40, 0x0, 0x7, 0x7, 0x4, 0x9, 0x4, 0x3, 0x4, 0x0}, {0x4000, 0x14000, 0x10, 0x3, 0x0, 0x8, 0x2, 0xc402, 0x7, 0x100000001, 0x2, 0x200, 0x0}, {0x10000, 0xf000, 0xe, 0x1ff, 0x1, 0x7e, 0x7, 0x8, 0x4, 0xb62, 0x1, 0x7f, 0x0}, {0x100000, 0x111004, 0xd, 0x0, 0x0, 0x4, 0x80000001, 0x800, 0xfffffffffffffff8, 0xfffffffffffffff9, 0x101, 0xeb, 0x0}, {0x6000, 0x100003, 0xc, 0x7fff, 0x61d6, 0x7fb, 0x1ff, 0x0, 0x3ff, 0x5deb, 0x1000, 0x0, 0x0}, {0x1f006, 0xd000, 0x1f, 0x7, 0x0, 0x1ff, 0x1, 0x40, 0x4, 0x200, 0xfffffffffffffff7, 0x9, 0x0}, {0x7000, 0x1, 0xf, 0x0, 0x3, 0x4998, 0x100000000, 0x1, 0x1, 0x9a10, 0x6, 0xc5c, 0x0}, {0x1f000, 0x3000, [0x0, 0x0, 0x0]}, {0x0, 0x5, [0x0, 0x0, 0x0]}, 0x24, 0x0, 0x7004, 0x12100, 0xd, 0x3000, 0x3005, [0xb9, 0x4, 0x10001, 0x2]}) 2017/12/02 09:14:00 executing program 6 (fault-call:9 fault-nth:8): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:14:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00008f8000-0xa)="2f6465762f6375736500", 0x80000, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000711000-0x20)={"b5786aeddf943fd9c7cc9f00f26ed523", {0x4, 0x7, 0x2, "d1264f844799", 0x7, 0x0}}) 2017/12/02 09:14:00 executing program 7: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f6175746f667300", 0x402000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000000)={0x0, 0x64, 0x81, 0x7, 0x5, 0x3}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000822000-0x85)={0x0, 0x7d, "815a0f9e88b34d98dc11cf1af28fb97c927397328a4768b46000d91e266f61c8d90b72bdae445269932fd55658a72678f7fa9cac86055427a62268e02aab97f8e77a845e649b5e324a0c119ee7471e01dad486ccd54c899f4f24e02b6ee1fe6a12309d4ad213df9db1550e212aee425a347395179633e2a2dbf002a340"}, &(0x7f0000745000-0x4)=0x85) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000531000-0x4)=@assoc_id=r2, &(0x7f0000d7a000-0x4)=0x4) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) unshare(0x8100) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r3 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) clock_gettime(0x5, &(0x7f0000a00000)={0x0, 0x0}) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 574.157419] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 574.157419] program syz-executor0 not setting count and/or reply_len properly [ 574.163763] FAULT_INJECTION: forcing a failure. [ 574.163763] name failslab, interval 1, probability 0, space 0, times 0 2017/12/02 09:14:00 executing program 3: r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000560000-0x8)={0x0, 0x80}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00004a1000-0x8)={r1, 0x9}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000eba000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000ff6000)="2f6465762f6b766d00", 0x202, 0x0) r2 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00008d2000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000068d000)=0xe8) r4 = getgid() sendmmsg$unix(r0, &(0x7f0000485000)=[{&(0x7f0000087000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f0000997000)=[{&(0x7f0000a10000-0xb2)="27097f6ce2fcd977a185bc9347660b63ff8bf6c0900ef77f349576958e0b7b0d0512cd390a28831c92b71d03ec3c995729b154e861e269e36382a172bb5347fe8de55239ea5e82df97ac5d02b4cedf33412b040b92338ddef6b4d2f4b0024316f5152e716fea36cc05e7d2f6da407e063d947e9e37ddfd56c72573ada711be554b3352f31d99205547526b4a6dba9f8f5c4118674021d04a9b1de2e8cec8f9999981a800625234dc9ec1e070c247df4f99b1", 0xb2}, {&(0x7f00009c1000-0x3d)="e31f404925055f057a9edb652fafa3fceea6f22a8b5184719dafce072943cd7592663ff6a2b4cc456c54767d4a2795e0de97f1f1b377e0a405c426c38a", 0x3d}, {&(0x7f0000d90000-0x7b)="8b65c72329278b1085cb8fee3819862a6f76bb1a853c21fa4736dd5a5e178557aca5460609f4c4c658d4e9c119f890a2ddcb065b3b7e0ae2f0f13944044aac5c02945f8ced15fc5b1d84f2d7d037bd7f0ecf896f886f30084bef6653379b1db6c7a05dee5a5f2d900c8c64c05e48778c4e74789fc97e57e80f8e58", 0x7b}], 0x3, &(0x7f00002b5000)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}], 0x18, 0x40000}, {&(0x7f00006a3000)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000a1f000-0x10)=[{&(0x7f0000273000-0xff)="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", 0xff}, {&(0x7f0000263000)="4e4028c914e53a013f106593352ea6475fcedfbad54db4219f473e99b2e54fefe86d1baf99e5780269663ffb75da57b40069fa758b526e183cd37f140da565aa5e0faeea724a095f594c21836e909065a76f7968cbee5f3cc581fc6810458d3a487c0a47147ff60387a7ab3b0cb848cff0edc36271620356cbc42f36141a2d3dbc51986c4922e8d73a8f2e060a991a1ad42ec5cebd994041a99e", 0x9a}], 0x2, 0x0, 0x0, 0x40041}], 0x2, 0x8000) pipe(&(0x7f0000305000)={0x0, 0x0}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) unlinkat(r5, &(0x7f000060d000-0x8)="2e2f66696c653000", 0x200) 2017/12/02 09:14:00 executing program 4: mmap(&(0x7f0000398000/0x4000)=nil, 0x4000, 0x3, 0x110, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000528000)="2f6465762f72666b696c6c00", 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00003df000-0x13)="00000000000000000000000000000000000000") request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) 2017/12/02 09:14:00 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000004000)="2f6465762f766373612300", 0xcf0d, 0x400400) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000006000-0x4)=0x0, 0x4) r2 = getuid() setuid(r2) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000005000-0x8)={0x0, 0x0}) r4 = dup(r3) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000005000)=0x7, 0x3, 0x1ff, &(0x7f0000003000-0x8)={0x0, 0x0}, &(0x7f0000005000)=0x80, 0x8) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000003000)=0x0) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000002000)={0x0, 0x0, 0x7, 0x0}) r5 = perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r6, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) msync(&(0x7f0000426000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000f04000)=0x0) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) statx(r5, &(0x7f000025d000-0xa)="2e2f636f6e74726f6c00", 0x100, 0x0, &(0x7f000045b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f000013c000-0x8)=0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000b6b000-0x4)=0x0, &(0x7f0000ce5000-0x4)=0x4) mprotect(&(0x7f00005e6000/0x1000)=nil, 0x1000, 0x3) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000529000)=0x2, &(0x7f0000b19000)=0x2) timerfd_create(0x1, 0x80800) 2017/12/02 09:14:00 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x101800, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000e51000-0x68)={0x7b, 0x0, [0x1000, 0x7ff, 0x3, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mprotect(&(0x7f000050c000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000e24000)=0x2, &(0x7f00004f4000-0x4)=0x2) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) getpeername$unix(r0, &(0x7f0000bfd000-0x1002)=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000447000)=0x1002) [ 574.163774] CPU: 1 PID: 18512 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 574.163780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.163784] Call Trace: [ 574.163799] dump_stack+0x194/0x257 [ 574.163816] ? arch_local_irq_restore+0x53/0x53 [ 574.163842] should_fail+0x8c0/0xa40 [ 574.163852] ? __free_insn_slot+0x5c0/0x5c0 [ 574.163867] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 574.163882] ? check_noncircular+0x20/0x20 [ 574.163901] ? find_held_lock+0x39/0x1d0 [ 574.163926] ? lock_downgrade+0x980/0x980 [ 574.163962] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 574.163980] ? rcu_note_context_switch+0x710/0x710 [ 574.164008] should_failslab+0xec/0x120 [ 574.164020] kmem_cache_alloc+0x47/0x760 [ 574.164036] ? lock_release+0xda0/0xda0 [ 574.164053] alloc_vfsmnt+0xe0/0x9c0 [ 574.164066] ? mnt_free_id.isra.21+0x50/0x50 [ 574.164080] ? avc_has_extended_perms+0x12c0/0x12c0 [ 574.164094] ? avc_has_perm+0x43e/0x680 [ 574.164114] ? find_held_lock+0x39/0x1d0 [ 574.164140] ? lock_downgrade+0x980/0x980 [ 574.164151] ? __get_fs_type+0x22/0xc0 [ 574.164160] ? selinux_ipv4_output+0x40/0x40 [ 574.164171] ? module_unload_free+0x5b0/0x5b0 [ 574.164182] ? lock_release+0xda0/0xda0 [ 574.164190] ? _cond_resched+0x14/0x30 [ 574.164204] ? selinux_mount+0x2bb/0x4e0 [ 574.164219] vfs_kern_mount.part.26+0x84/0x4a0 [ 574.164233] ? may_umount+0xa0/0xa0 [ 574.164241] ? _raw_read_unlock+0x22/0x30 [ 574.164250] ? __get_fs_type+0x8a/0xc0 [ 574.164269] do_mount+0xea4/0x2bb0 [ 574.164289] ? copy_mount_string+0x40/0x40 [ 574.164298] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 574.164311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 574.164330] ? retint_kernel+0x10/0x10 [ 574.164356] ? copy_mount_options+0x179/0x2e0 [ 574.164367] ? copy_mount_options+0x1f4/0x2e0 [ 574.164384] compat_SyS_mount+0xd0/0x1070 [ 574.164397] ? show_fd_locks+0x2c0/0x2c0 [ 574.164408] do_fast_syscall_32+0x3ee/0xf9d [ 574.164428] ? do_int80_syscall_32+0x9d0/0x9d0 [ 574.164446] ? lockdep_sys_exit+0x47/0xf0 [ 574.164456] ? syscall_return_slowpath+0x2ad/0x550 [ 574.164471] ? sysret32_from_system_call+0x5/0x3b [ 574.164488] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 574.164508] entry_SYSENTER_compat+0x51/0x60 [ 574.164514] RIP: 0023:0xf7fb4c79 [ 574.164519] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 574.164527] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 574.164532] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 574.164536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.164540] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 574.164544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.212243] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 574.212243] program syz-executor2 not setting count and/or reply_len properly [ 574.238614] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 574.238614] program syz-executor2 not setting count and/or reply_len properly [ 574.281657] FAULT_INJECTION: forcing a failure. [ 574.281657] name failslab, interval 1, probability 0, space 0, times 0 [ 574.281669] CPU: 0 PID: 18541 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 574.281676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.281680] Call Trace: [ 574.281696] dump_stack+0x194/0x257 [ 574.281714] ? arch_local_irq_restore+0x53/0x53 [ 574.281726] ? check_noncircular+0x20/0x20 [ 574.281756] should_fail+0x8c0/0xa40 [ 574.281775] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 574.281809] ? find_held_lock+0x39/0x1d0 [ 574.281836] ? lock_downgrade+0x980/0x980 [ 574.281869] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 574.281877] ? sget_userns+0x157/0xe20 [ 574.281891] ? rcu_note_context_switch+0x710/0x710 [ 574.281915] should_failslab+0xec/0x120 [ 574.281929] kmem_cache_alloc_trace+0x4b/0x750 [ 574.281957] sget_userns+0x2a3/0xe20 [ 574.281966] ? get_anon_bdev+0x2a0/0x2a0 [ 574.281991] ? destroy_unused_super.part.7+0xd0/0xd0 [ 574.282007] ? cred_has_capability+0x1a0/0x3d0 [ 574.282025] ? selinux_ipv4_output+0x40/0x40 [ 574.282043] ? free_pages+0x51/0x90 [ 574.282057] ? selinux_sb_copy_data+0x443/0x610 [ 574.282082] ? selinux_capable+0x36/0x40 [ 574.282103] ? security_capable+0x8e/0xc0 [ 574.282121] ? get_anon_bdev+0x2a0/0x2a0 [ 574.282134] ? ns_capable_common+0xcf/0x160 [ 574.282151] ? get_anon_bdev+0x2a0/0x2a0 [ 574.282164] sget+0xd2/0x120 [ 574.282174] ? __get_fs_type+0x22/0xc0 [ 574.282187] ? shmem_remount_fs+0x6c0/0x6c0 [ 574.282198] mount_nodev+0x37/0x100 [ 574.282213] shmem_mount+0x2c/0x40 [ 574.282226] mount_fs+0x66/0x2d0 [ 574.282243] vfs_kern_mount.part.26+0xc6/0x4a0 [ 574.282258] ? may_umount+0xa0/0xa0 [ 574.282268] ? _raw_read_unlock+0x22/0x30 [ 574.282280] ? __get_fs_type+0x8a/0xc0 [ 574.282300] do_mount+0xea4/0x2bb0 [ 574.282322] ? copy_mount_string+0x40/0x40 [ 574.282331] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 574.282345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 574.282365] ? retint_kernel+0x10/0x10 [ 574.282387] ? copy_mount_options+0x18b/0x2e0 [ 574.282401] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 574.282415] ? copy_mount_options+0x1f4/0x2e0 [ 574.282434] compat_SyS_mount+0xd0/0x1070 [ 574.282449] ? show_fd_locks+0x2c0/0x2c0 [ 574.282462] do_fast_syscall_32+0x3ee/0xf9d [ 574.282484] ? do_int80_syscall_32+0x9d0/0x9d0 [ 574.282504] ? lockdep_sys_exit+0x47/0xf0 [ 574.282515] ? syscall_return_slowpath+0x2ad/0x550 [ 574.282532] ? sysret32_from_system_call+0x5/0x3b [ 574.282551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 574.282572] entry_SYSENTER_compat+0x51/0x60 [ 574.282578] RIP: 0023:0xf7fb4c79 [ 574.282584] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 2017/12/02 09:14:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000da000)={0x8000, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001000-0x4)=0x2, 0x4) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000dd7000-0x8)={0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x96, "11"}, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) r3 = perf_event_open(&(0x7f00005e9000-0x78)={0x2, 0x78, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5a, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00008c7000)=0x80000009) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0xfffffffffffffffc) inotify_init1(0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) symlinkat(&(0x7f0000523000-0xa)="2e2f636f6e74726f6c00", r4, &(0x7f0000297000-0xa)="2e2f636f6e74726f6c00") ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000149000-0x4)=0x2f1) readv(0xffffffffffffffff, &(0x7f000045b000-0x50)=[], 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000629000-0x8)={0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) mkdir(&(0x7f0000aa3000)="2e2f636f6e74726f6c00", 0x0) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7f) poll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0) chmod(&(0x7f000096a000)="2e2f636f6e74726f6c2f66696c653000", 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f00003ad000-0xb)="2f6465762f6c6f6f702300", 0x0, 0x0) 2017/12/02 09:14:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000dd6000-0x7)="2a70726f632e00", 0xfffffffffffffffc) pipe2(&(0x7f000022d000)={0x0, 0x0}, 0x80807) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00001d7000)={0x0, 0x1000, "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"}, &(0x7f000005a000-0x4)=0x1008) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000c83000)=@assoc_value={r1, 0xfffffffffffffffa}, 0x8) 2017/12/02 09:14:01 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000022000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000484000)={0x1, 0x0, 0x1, 0x85b3}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f00002c2000-0x10)={0x6, r3, 0x1, 0x200}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x10000, 0x0, &(0x7f0000ca2000/0x4000)=nil}) 2017/12/02 09:14:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0xc6a0081, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}) gettid() r0 = syz_open_dev$vcsn(&(0x7f00009a4000-0xa)="2f6465762f7663732300", 0x9, 0x42) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000030d000-0xe8)={{{@in=@multicast2=0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000925000-0x4)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000071e000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000e68000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00008a1000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0xeba, 0x1, 0x3, 0x9, 0x80, 0x20, 0x7ff, r1, r2}, {0x0, 0x7, 0xffffffffffffffc1, 0xfffffffffffffff7, 0x5, 0x1ff, 0x100, 0x401}, {0x9, 0x7fff, 0x9, 0xd3}, 0x0, 0x0, 0x9, 0x0, 0x5, 0x3}, {{@in=@rand_addr=0x9, 0xc8, 0x2}, 0x3, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0xffffffffffff27a1, 0x3, 0x3, 0x4, 0x8000, 0xfffffffffffffffc, 0x7}}, 0xe8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00003b6000-0x8)={0x0, 0xc0e}, &(0x7f0000037000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000c97000)={r3, 0x0}, 0x8) seccomp(0x1, 0x1, &(0x7f0000e37000)={0x6, &(0x7f0000de0000-0x30)=[{0x7, 0x3, 0x401, 0x0}, {0xfff, 0x6, 0x4, 0x6}, {0x3ff, 0x46a1, 0x3, 0x5}, {0x41, 0x1, 0x3, 0x1}, {0x3, 0x9, 0x7, 0x0}, {0xf7, 0x400, 0xfa78, 0x6}]}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000c29000)="b58d48f59665b3867ced17705a6650b3df06d682b3e2d76e6eab010a6797ca5a94cd2ac97fa040d03064b6667b38b130e7e52fa1bb65593620feb0f05f00684ec32482b76a2d338b3220e125490f1fdaa42f02362a51cb6128955ffa296ad4d0b560e627eb83ed09c513e269308bb0f524ddf78f3df3f1c2b6dd1cbf59a8dcaadbc7a228cba9fa28") ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000ca6000-0x70)={0x9, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x3866, 0x1ff, 0x7, 0x61f4, &(0x7f0000fc9000-0x10)=@common="69703667726530000000000000000000", 0x0, 0x6, 0x294}) 2017/12/02 09:14:01 executing program 1: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000094e000-0xc)={0x6, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000001000-0x70)={[{0x4891, 0x2, 0x4, 0x3, 0x8, 0x7, 0xe7, 0x7, 0x8, 0x7ff, 0x74, 0x0, 0x1}, {0x4, 0x10001, 0x7fffffff, 0x3, 0x7, 0x6, 0x3f, 0x81, 0x400, 0x7, 0x664, 0xfffffffffffffffc, 0x66d3}, {0x9, 0x8, 0x6, 0x4, 0x8, 0x2, 0x5, 0x9, 0x6, 0x6, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x9f0}], 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000e0d000)="7374617400") ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f000006a000)={0x2, 0x0, 0x7, 0x100}) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:14:01 executing program 6 (fault-call:9 fault-nth:9): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:14:01 executing program 7: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000daa000)=0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000e29000)=0x7fffffff) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0x0, 0xfffffffffffffffe, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x2}, @time=@tick=0x9488}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000d2e000-0x8)="2e2f66696c653000", &(0x7f000045a000)=@known="73797374656d2e706f7369785f61636c5f616363657373ff", &(0x7f0000766000)="70726f6300", 0x5, 0x0) mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2017/12/02 09:14:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f000061a000-0x8)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}}, 0x8) [ 574.282594] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 574.282601] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 574.282608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.282614] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 574.282622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/02 09:14:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000443000+0x25e)="6b657972696e6700", &(0x7f0000ed8000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f000024e000)="69645f6c656761637900", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000f21000-0x7)="2a70726f632e00", r0) keyctl$describe(0x6, r0, &(0x7f0000528000)="0000000000000000000000000000000000000000000000000000000000000000000000000000", 0x26) 2017/12/02 09:14:01 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00002b7000)="2f6465762f6375736500", 0x480, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0], 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000270000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000661000)="00", 0x0) 2017/12/02 09:14:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) syz_open_dev$loop(&(0x7f0000664000)="2f6465762f6c6f6f702300", 0x0, 0x0) pipe(&(0x7f0000b23000)={0x0, 0x0}) 2017/12/02 09:14:01 executing program 3: perf_event_open(&(0x7f0000a51000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f000061a000-0xd)="2f6465762f7573626d6f6e2300", 0x5, 0x18000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00001ef000-0x9)="2f6465762f6b766d00", 0x40000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00004f2000-0x10)={0x0, 0x0, &(0x7f0000ca2000/0x4000)=nil}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000a50000)="2f6465762f72746300", 0x8880, 0x0) ioctl$TUNDETACHFILTER(r2, 0x400854d6, 0x0) [ 574.952544] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 574.952544] program syz-executor0 not setting count and/or reply_len properly [ 574.958902] sg_write: data in/out 524252/1 bytes for SCSI command 0xf4-- guessing data in; [ 574.958902] program syz-executor2 not setting count and/or reply_len properly 2017/12/02 09:14:01 executing program 1: perf_event_open(&(0x7f000067d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f000002f000-0xb)="706b6373375f7465737400", &(0x7f0000345000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000709000)="00", 0x0) 2017/12/02 09:14:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f00006c8000)="69645f6c6567616398003f", &(0x7f0000d0d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00004b2000)="2a707267632e18f5", 0xfffffffffffffffc) r0 = syz_open_dev$vcsa(&(0x7f0000250000-0xb)="2f6465762f766373612300", 0x19, 0x4000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000cb2000)=0xfffffffffffffff7) ioctl$TCSBRKP(r0, 0x5425, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000f86000-0x6)={0x9, 0x1ff}) r1 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f000060c000)={0x4, 0x9}) 2017/12/02 09:14:01 executing program 6 (fault-call:9 fault-nth:10): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00004c9000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = creat(&(0x7f00008b2000)="2e2f66696c653000", 0x20000000000000) write$sndseq(r1, &(0x7f0000012000-0x2e)=[{0xfff, 0x0, 0x0, 0x40, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000687000)="2e2f66696c653000") mount(&(0x7f00009dd000)="2e2f66696c653000", &(0x7f00009e5000)="2e2f66696c653000", &(0x7f00004df000)="746d70667300", 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00006e0000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2017/12/02 09:14:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000740000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000bc1000)="2f6465762f73672300", 0x0, 0x2) lsetxattr(&(0x7f0000105000)="2e2f636f6e74726f6c00", &(0x7f0000ea8000-0xf)=@random={"757365722e00", "2f6465762f73672300"}, &(0x7f00003ef000-0xb)="c05c757365722c2e3a2600", 0xb, 0x0) recvfrom$unix(r0, &(0x7f000048a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x65, 0x10000, &(0x7f00006d6000-0xc)=@file={0x1, "2e2f636f6e74726f6c00"}, 0xc) write$tun(r0, &(0x7f00001ea000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @eth={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x0, 0x0, 0x0}}], {{0x0, @llc={0x13, @llc={0x0, 0x0, "03", "620414f4da507c8493d20fc3ba1c1853"}}}}}}, 0x31) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f000044b000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") syz_open_dev$loop(&(0x7f0000ade000)="2f6465762f6c6f6f702300", 0x3, 0x0) [ 575.011172] FAULT_INJECTION: forcing a failure. [ 575.011172] name failslab, interval 1, probability 0, space 0, times 0 [ 575.011186] CPU: 0 PID: 18581 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 575.011193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.011198] Call Trace: [ 575.011212] dump_stack+0x194/0x257 [ 575.011232] ? arch_local_irq_restore+0x53/0x53 [ 575.011244] ? check_noncircular+0x20/0x20 [ 575.011274] should_fail+0x8c0/0xa40 [ 575.011293] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 575.011322] ? find_held_lock+0x39/0x1d0 [ 575.011349] ? lock_downgrade+0x980/0x980 [ 575.011382] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 575.011392] ? sget_userns+0x157/0xe20 [ 575.011407] ? rcu_note_context_switch+0x710/0x710 [ 575.011430] should_failslab+0xec/0x120 [ 575.011444] kmem_cache_alloc_trace+0x4b/0x750 [ 575.011472] sget_userns+0x2a3/0xe20 [ 575.011480] ? get_anon_bdev+0x2a0/0x2a0 [ 575.011504] ? destroy_unused_super.part.7+0xd0/0xd0 [ 575.011514] ? cred_has_capability+0x1a0/0x3d0 [ 575.011528] ? selinux_ipv4_output+0x40/0x40 [ 575.011541] ? free_pages+0x51/0x90 [ 575.011550] ? selinux_sb_copy_data+0x443/0x610 [ 575.011571] ? selinux_capable+0x36/0x40 [ 575.011582] ? security_capable+0x8e/0xc0 [ 575.011593] ? get_anon_bdev+0x2a0/0x2a0 [ 575.011602] ? ns_capable_common+0xcf/0x160 [ 575.011614] ? get_anon_bdev+0x2a0/0x2a0 [ 575.011622] sget+0xd2/0x120 [ 575.011631] ? __get_fs_type+0x22/0xc0 [ 575.011643] ? shmem_remount_fs+0x6c0/0x6c0 [ 575.011653] mount_nodev+0x37/0x100 [ 575.011666] shmem_mount+0x2c/0x40 [ 575.011679] mount_fs+0x66/0x2d0 [ 575.011696] vfs_kern_mount.part.26+0xc6/0x4a0 [ 575.011716] ? may_umount+0xa0/0xa0 [ 575.011724] ? _raw_read_unlock+0x22/0x30 [ 575.011736] ? __get_fs_type+0x8a/0xc0 [ 575.011760] do_mount+0xea4/0x2bb0 [ 575.011782] ? copy_mount_string+0x40/0x40 [ 575.011788] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 575.011800] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 575.011819] ? retint_kernel+0x10/0x10 [ 575.011841] ? copy_mount_options+0x149/0x2e0 [ 575.011855] ? __sanitizer_cov_trace_pc+0x4b/0x50 [ 575.011869] ? copy_mount_options+0x1f4/0x2e0 [ 575.011888] compat_SyS_mount+0xd0/0x1070 [ 575.011902] ? show_fd_locks+0x2c0/0x2c0 [ 575.011914] do_fast_syscall_32+0x3ee/0xf9d [ 575.011934] ? do_int80_syscall_32+0x9d0/0x9d0 [ 575.011946] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 575.011957] ? lockdep_sys_exit+0x47/0xf0 [ 575.011966] ? syscall_return_slowpath+0x2ad/0x550 [ 575.011979] ? sysret32_from_system_call+0x5/0x3b [ 575.011995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 575.012017] entry_SYSENTER_compat+0x51/0x60 [ 575.012023] RIP: 0023:0xf7fb4c79 [ 575.012028] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 575.012037] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 575.012042] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 575.012046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.012052] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 575.012056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.135828] FAULT_INJECTION: forcing a failure. [ 575.135828] name failslab, interval 1, probability 0, space 0, times 0 [ 575.135862] CPU: 1 PID: 18604 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 575.135868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.135872] Call Trace: [ 575.135888] dump_stack+0x194/0x257 [ 575.135907] ? arch_local_irq_restore+0x53/0x53 [ 575.135936] should_fail+0x8c0/0xa40 [ 575.135948] ? wait_for_completion+0x7b0/0x7b0 [ 575.135961] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 575.135989] ? find_held_lock+0x39/0x1d0 [ 575.136018] ? __lock_is_held+0xbc/0x140 [ 575.136049] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 575.136060] ? rcu_note_context_switch+0x710/0x710 [ 575.136069] ? rcu_note_context_switch+0x710/0x710 [ 575.136092] should_failslab+0xec/0x120 [ 575.136105] __kmalloc+0x63/0x760 [ 575.136112] ? lockdep_init_map+0x3d/0x70 [ 575.136125] ? debug_mutex_init+0x2d/0x60 [ 575.136133] ? __list_lru_init+0xcf/0x750 [ 575.136150] __list_lru_init+0xcf/0x750 [ 575.136169] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 575.136182] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 575.136188] ? __lockdep_init_map+0xe4/0x650 [ 575.136203] ? lockdep_init_map+0x3d/0x70 [ 575.136223] sget_userns+0x64f/0xe20 [ 575.136229] ? get_anon_bdev+0x2a0/0x2a0 [ 575.136253] ? destroy_unused_super.part.7+0xd0/0xd0 [ 575.136264] ? cred_has_capability+0x1a0/0x3d0 [ 575.136277] ? selinux_ipv4_output+0x40/0x40 [ 575.136290] ? free_pages+0x51/0x90 [ 575.136300] ? selinux_sb_copy_data+0x443/0x610 [ 575.136324] ? selinux_capable+0x36/0x40 [ 575.136337] ? security_capable+0x8e/0xc0 [ 575.136349] ? get_anon_bdev+0x2a0/0x2a0 [ 575.136358] ? ns_capable_common+0xcf/0x160 [ 575.136371] ? get_anon_bdev+0x2a0/0x2a0 [ 575.136380] sget+0xd2/0x120 [ 575.136387] ? __get_fs_type+0x22/0xc0 [ 575.136398] ? shmem_remount_fs+0x6c0/0x6c0 [ 575.136408] mount_nodev+0x37/0x100 [ 575.136422] shmem_mount+0x2c/0x40 [ 575.136433] mount_fs+0x66/0x2d0 [ 575.136449] vfs_kern_mount.part.26+0xc6/0x4a0 [ 575.136463] ? may_umount+0xa0/0xa0 [ 575.136471] ? _raw_read_unlock+0x22/0x30 [ 575.136480] ? __get_fs_type+0x8a/0xc0 [ 575.136500] do_mount+0xea4/0x2bb0 [ 575.136521] ? copy_mount_string+0x40/0x40 [ 575.136531] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 575.136542] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 575.136561] ? retint_kernel+0x10/0x10 [ 575.136586] ? copy_mount_options+0x18b/0x2e0 [ 575.136597] ? copy_mount_options+0x190/0x2e0 [ 575.136607] ? copy_mount_options+0x1f4/0x2e0 [ 575.136625] compat_SyS_mount+0xd0/0x1070 [ 575.136639] ? show_fd_locks+0x2c0/0x2c0 [ 575.136650] do_fast_syscall_32+0x3ee/0xf9d [ 575.136671] ? do_int80_syscall_32+0x9d0/0x9d0 [ 575.136690] ? lockdep_sys_exit+0x47/0xf0 [ 575.136700] ? syscall_return_slowpath+0x2ad/0x550 [ 575.136715] ? sysret32_from_system_call+0x5/0x3b [ 575.136733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 575.136753] entry_SYSENTER_compat+0x51/0x60 [ 575.136759] RIP: 0023:0xf7fb4c79 [ 575.136764] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 575.136772] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 575.136776] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 575.136781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.136785] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 575.136789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.136868] ------------[ cut here ]------------ [ 575.136870] DEBUG_LOCKS_WARN_ON(depth <= 0) [ 575.136917] WARNING: CPU: 1 PID: 18604 at kernel/locking/lockdep.c:3766 lock_release+0x5de/0xda0 [ 575.136921] Kernel panic - not syncing: panic_on_warn set ... [ 575.136921] [ 575.136927] CPU: 1 PID: 18604 Comm: syz-executor6 Not tainted 4.15.0-rc1+ #114 [ 575.136931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.136932] Call Trace: [ 575.136939] dump_stack+0x194/0x257 [ 575.136945] ? arch_local_irq_restore+0x53/0x53 [ 575.136954] ? vsnprintf+0x1ed/0x1900 [ 575.136962] panic+0x1e4/0x41c [ 575.136967] ? refcount_error_report+0x214/0x214 [ 575.136974] ? show_regs_print_info+0x65/0x65 [ 575.136982] ? __warn+0x1c1/0x200 [ 575.136989] ? lock_release+0x5de/0xda0 [ 575.136994] __warn+0x1dc/0x200 [ 575.137000] ? lock_release+0x5de/0xda0 [ 575.137012] report_bug+0x211/0x2d0 [ 575.137022] fixup_bug.part.11+0x37/0x80 [ 575.137029] do_error_trap+0x2d7/0x3e0 [ 575.137035] ? __down_trylock_console_sem+0x10d/0x1e0 [ 575.137043] ? math_error+0x400/0x400 [ 575.137049] ? vprintk_emit+0x3ea/0x590 [ 575.137060] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 575.137069] do_invalid_op+0x1b/0x20 [ 575.137074] invalid_op+0x18/0x20 [ 575.137080] RIP: 0010:lock_release+0x5de/0xda0 [ 575.137083] RSP: 0018:ffff8801b8437588 EFLAGS: 00010086 [ 575.137089] RAX: dffffc0000000008 RBX: 1ffff10037086eb6 RCX: ffffffff8159c48e [ 575.137092] RDX: 0000000000010000 RSI: ffffc900043f6000 RDI: 0000000000000000 [ 575.137096] RBP: ffff8801b84376f8 R08: 0000000000000001 R09: 0000000000000000 [ 575.137100] R10: ffff8801c0e843c0 R11: fffffbfff0e8926b R12: ffff8801b84375d0 [ 575.137104] R13: ffff8801b84376d0 R14: ffff8801c6ed6358 R15: ffffffff87489d60 [ 575.137113] ? vprintk_func+0x5e/0xc0 [ 575.137121] ? lock_release+0x5de/0xda0 [ 575.137128] ? destroy_unused_super.part.7+0x18/0xd0 [ 575.137135] ? lock_downgrade+0x980/0x980 [ 575.137144] ? rcu_read_lock_sched_held+0x108/0x120 [ 575.137151] ? __kmalloc+0x471/0x760 [ 575.137156] ? lockdep_init_map+0x3d/0x70 [ 575.137164] ? up_read+0x1a/0x40 [ 575.137171] ? memcg_put_cache_ids+0x10/0x20 [ 575.137177] ? __list_lru_init+0x35c/0x750 [ 575.137185] up_write+0x6b/0x120 [ 575.137191] ? up_read+0x40/0x40 [ 575.137196] ? __lockdep_init_map+0xe4/0x650 [ 575.137203] ? lockdep_init_map+0x3d/0x70 [ 575.137211] destroy_unused_super.part.7+0x18/0xd0 [ 575.137217] sget_userns+0x905/0xe20 [ 575.137223] ? get_anon_bdev+0x2a0/0x2a0 [ 575.137233] ? destroy_unused_super.part.7+0xd0/0xd0 [ 575.137239] ? cred_has_capability+0x1a0/0x3d0 [ 575.137246] ? selinux_ipv4_output+0x40/0x40 [ 575.137253] ? free_pages+0x51/0x90 [ 575.137260] ? selinux_sb_copy_data+0x443/0x610 [ 575.137269] ? selinux_capable+0x36/0x40 [ 575.137275] ? security_capable+0x8e/0xc0 [ 575.137282] ? get_anon_bdev+0x2a0/0x2a0 [ 575.137287] ? ns_capable_common+0xcf/0x160 [ 575.137294] ? get_anon_bdev+0x2a0/0x2a0 [ 575.137300] sget+0xd2/0x120 [ 575.137305] ? __get_fs_type+0x22/0xc0 [ 575.137312] ? shmem_remount_fs+0x6c0/0x6c0 [ 575.137318] mount_nodev+0x37/0x100 [ 575.137325] shmem_mount+0x2c/0x40 [ 575.137331] mount_fs+0x66/0x2d0 [ 575.137338] vfs_kern_mount.part.26+0xc6/0x4a0 [ 575.137346] ? may_umount+0xa0/0xa0 [ 575.137351] ? _raw_read_unlock+0x22/0x30 [ 575.137358] ? __get_fs_type+0x8a/0xc0 [ 575.137366] do_mount+0xea4/0x2bb0 [ 575.137375] ? copy_mount_string+0x40/0x40 [ 575.137382] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 575.137389] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 575.137399] ? retint_kernel+0x10/0x10 [ 575.137407] ? copy_mount_options+0x18b/0x2e0 [ 575.137414] ? copy_mount_options+0x190/0x2e0 [ 575.137420] ? copy_mount_options+0x1f4/0x2e0 [ 575.137428] compat_SyS_mount+0xd0/0x1070 [ 575.137434] ? show_fd_locks+0x2c0/0x2c0 [ 575.137441] do_fast_syscall_32+0x3ee/0xf9d [ 575.137450] ? do_int80_syscall_32+0x9d0/0x9d0 [ 575.137458] ? lockdep_sys_exit+0x47/0xf0 [ 575.137465] ? syscall_return_slowpath+0x2ad/0x550 [ 575.137473] ? sysret32_from_system_call+0x5/0x3b [ 575.137482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 575.137490] entry_SYSENTER_compat+0x51/0x60 [ 575.137494] RIP: 0023:0xf7fb4c79 [ 575.137497] RSP: 002b:00000000f776e08c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 575.137504] RAX: ffffffffffffffda RBX: 00000000209dd000 RCX: 00000000209e5000 [ 575.137507] RDX: 00000000204df000 RSI: 0000000000000001 RDI: 0000000020000000 [ 575.137510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.137514] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 575.137517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.139486] Dumping ftrace buffer: [ 575.139490] (ftrace buffer empty) [ 575.139492] Kernel Offset: disabled