INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-8,10.128.0.35' (ECDSA) to the list of known hosts. 2017/08/28 03:15:11 fuzzer started 2017/08/28 03:15:11 dialing manager at 10.128.0.26:44801 2017/08/28 03:15:19 executing program 0: clock_gettime(0x1, &(0x7f0000667000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x100000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MEMORY_ONDEMAND_STATE(r0, 0x4010aef5, &(0x7f0000000000)={0x3, &(0x7f0000001000-0x30)=[{0x2000, 0x0}, {0x4, 0x7}, {0x5000, 0x1ff}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001000)=[@in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000001000-0x8)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000002000)="a5f38371db43304d355d44475796f8f440b6bb59bec5d75f65bafa036fcec963ae065c2433d45eb1de76d8b501f904608fead6c098d88128767ac7393a1a770160dbb79222fb5c89a5e9e40d3dabd00d82eb072033c1503b28128cc716dbea3e2fa8a8de21003b44567c41ba8c102ecb0d9e34b7bef6dda357ffd4040fcee5c11bc90f17fa24b95bb28b5ed9598efb2f0cf1cf54bb21895ce4ebf65856bd1e3279406a0a78dcca77e44b7970c4ceb13bd31dfbd0de5a7318eaa8cd3b8ab0f3966acc4ef1be287642c247af4bb8cae0024e33a3ba431013d004cad6a9c50fc1", 0xdf) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002000-0xc)={0x0, 0x2, 0x20}, &(0x7f0000003000)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001000)={r1, 0x1d9}, &(0x7f0000001000-0x4)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r1, 0x8}, 0x8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000005000-0x4)=0xffffffffffff0000) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000004000-0x2)={0x7, 0x4}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000006000-0xc)=@sack_info={r1, 0x8001, 0x3}, &(0x7f0000006000-0x4)=0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000003000-0x50)={0x314, @tick=0x5, 0x401, {0x3052, 0x100000001}, 0x0, 0x2, 0x23, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x1f) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000007000-0x10)={0x0, 0x0}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000007000-0x90)=[{0x4, 0x4, 0x2, 0x5, @time={0x0, 0x0}, {0x48, 0x6}, {0x4, 0xe77b}, @quote={{0xffffffffffff0000, 0x8000}, 0xc21d, &(0x7f0000007000-0x30)={0x8000, 0x9, 0x6, 0x200, @time={0x0, 0x989680}, {0x1000, 0x7fffffff}, {0xffff, 0x9}, @ext={0x53, &(0x7f0000001000-0x53)="0af9e10221b33ac2553e82e0d51266bcd51fba6d11831619aa3a7b35898952453e05663bcefc0e03b5279f72b2bb126b20e2403567aba5d7028307784293ea1fae6e3f3b2dea6cc0e99fd3433fab6f2f0a0b6c"}}}}, {0x5, 0x1b4, 0x3ff, 0x6, @time={r2, r3+10000000}, {0x101, 0x0}, {0x1000, 0x2}, @raw8={"20d29a4a746d43e838e0a162"}}, {0x4, 0x3, 0x40000000000000, 0x7, @tick=0x100, {0x2, 0xffffffff}, {0x5, 0x40}, @ext={0xe5, &(0x7f0000006000)="c2abfa36835f11ea1849fee5baebd0dfff290764c53af7f7342273f48663b76603c121f9ffa096dc96119621733e8f1714e99c6bdc7c0d9c0af66ec23391ae73ba8d9a080217c9994a55f4ec72d045b9eabf1f9a137510da73fe0d61278d263d343ada1d98dcb1e8919391f4d5407924012a9b493073cad4c3188de3ed9e072106737898c22579f4593caffba189406d73c52e2e8cb54833c2560c3a0a052e2eb3716be80672a08f50e31666d452397b32addcaaaed9b5bf153f535a6beb9a2eb7cf681a8fcf6613fdd29e19571872ae5309484069eadec99474cdc213713329af35135f16"}}], 0x90) 2017/08/28 03:15:19 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f72666b696c6c00", 0x80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000002000-0x17)="0000000000000000000000000000000000000000000000", &(0x7f0000000000)=0x17) fcntl$setflags(r0, 0x2, 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x0, &(0x7f0000001000-0x4)=0x4) ioctl$TCSBRK(r0, 0x5409, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000003000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002000)="2f6465762f72746300", 0x20000, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000002000)={{0x0, 0x0}, {0x0, 0x989680}}, &(0x7f0000000000+0x629)={{0x0, 0x0}, {0x0, 0x0}}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000003000)=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000004000)=0xb) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000005000)=0x7fff, 0x4) splice(r1, 0x0, r1, 0x0, 0x81, 0x8) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000004000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r3 = semget(0x3, 0x3, 0x2) semctl$SEM_INFO(r3, 0x0, 0x13, &(0x7f0000003000-0xff)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000006000)="8cb67e3450fde4e2025628419d58f6301c82d2b447334102a621f07d1dd4d6a2ef3c118022eadc18c43c06be3d8b95b355a12c3b68f47e715092e0156a89", 0x3e) fremovexattr(r2, &(0x7f0000006000-0x10)=@random={"62747266732e00", "2f6465762f72746300"}) bind$bt_hci(r0, &(0x7f0000001000)={0x1f, 0x3f, 0x1}, 0x6) 2017/08/28 03:15:19 executing program 1: r0 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000001000-0x34)={0x57, 0x2, 0xffffffffffffffc0, {0x6, 0x2}, {0x3, 0x6}, @period={0x5c, 0x7f, 0x100000001, 0x200, 0x3, {0x37, 0xe635, 0x8, 0x5}, 0x5, [0x7, 0x372, 0x0, 0x0, 0x200]}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002000-0x9)="2f6465762f72746300", 0x80, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000003000-0x4)=0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000004000-0x4)=0xc) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000004000-0x8)={0x2, r2}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000005000-0x4)=0x6, 0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000005000)=0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000007000-0x4c)={0x2, 0x3ff, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat(r0, &(0x7f0000001000-0x8)="2e2f66696c653000", 0x400, 0x40) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004000)={{{@in=@multicast2=0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000007000)=0xe8) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000009000-0xc)={0x3f, 0x4, 0x6}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(r3, 0x4b70, &(0x7f0000009000)={0x3, 0x2, 0x9, 0x100, 0x5, 0x71}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f000000b000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f0000007000-0x78)={0x2, 0x78, 0x5, 0x9a1, 0xffffffff, 0x4, 0x0, 0x8000, 0x1020, 0x2, 0x101, 0x7, 0xfffffffffffffff7, 0xf, 0x0, 0x1, 0x0, 0xffffffffffff78eb, 0x74a7, 0x10100, 0x4, 0x1, 0x6, 0x2, 0x6e30, 0xa3c, 0x0}, r2, 0xfffffffffffffffb, r0, 0x2) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000006000)={{0x0, 0x989680}, {0x77359400, 0x0}}, &(0x7f000000c000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) 2017/08/28 03:15:19 executing program 7: r0 = timerfd_create(0x2, 0x80800) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$mouse(&(0x7f00009e7000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x20000000000000, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001000-0xd8)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000001000-0x10)={r2, &(0x7f0000001000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x3}) setsockopt$inet_tcp_TCP_MINRTT_INTERVAL(r1, 0x6, 0x6bf, &(0x7f0000002000-0x4)=0xfffffffffffffffd, 0x4) ioctl$TIOCCONS(r1, 0x541d) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fchmodat(r1, &(0x7f0000003000-0x8)="2e2f66696c653000", 0xa0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000001000-0x4)=0x0) chroot(&(0x7f0000003000-0x8)="2e2f66696c653000") setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000003000-0x4)=0x6, 0x4) r3 = shmget$private(0x0, 0x1000, 0x48, &(0x7f0000001000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000003000)={0xc0000, 0x0, [0x36d, 0x7, 0x8000, 0x81, 0x200, 0x3, 0xb6, 0xad]}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000004000-0x8)={0x100, 0xd2, 0x100, 0x2}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000004000)={0x2000, 0x0}) prctl$setfpexc(0xc, 0xb0001) restart_syscall() mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000003000+0x422)=0x0, &(0x7f0000005000)=0x4) socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000006000)=0x0) 2017/08/28 03:15:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f00004d8000-0x9)="2f6465762f73672300", 0xf80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x52cf, 0x4) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000002000-0x12)="2e726571756573745f6b65795f6175746800", &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000001000-0x8)="7472757374656400", &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r2, 0x1ff, 0x48, r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000003000-0x4)=0x7f, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000004000-0x4)=0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000004000-0xdf)="77ba50f9e195c1546cadf249ec478677d98d343dbba759345b4a6b5d85560eff4aeca3e926d025e6035b2a86dfa249950089f6397fc3839075c665526cde2eda225023f871a61536ab403aac898bc17ed861d60f6c6a3a48d72b4aa5f980733a83339909ff1c95e9282dc36ae29da3ef1b42a672f9b58cae719450b1261df17cbf56dc64dfa88e8f9d57c730af812ee14712a188e906428910cec82bf41fde4067a3bf59d7f476e18076e321b07e896b9c6695afc1526009a8567e0466104150d0e485bcc474ebfdac847e1db0207480f4cdb470d987472e372115114836e4", 0xdf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001000)={@common="69706464703000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000004000-0x4)=0x0, &(0x7f0000003000-0x4)=0x0, &(0x7f0000005000-0x4)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003000)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x0, 0x401, 0x1, 0x7, 0xb, 0x20, 0xa0, 0xffffffff, r4, r5}, {0x9, 0x68, 0x4, 0xfaa, 0x9, 0x0, 0x81, 0x2}, {0x1, 0x9, 0x9, 0x800}, 0x400, 0x1, 0x81, 0x1, 0x2, 0x3}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x79}, 0x15, @in=@rand_addr=0xa76, 0x8000, 0x7, 0x2, 0xf31, 0x161, 0x5ed, 0x4}}, 0xe8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000005000)="6465616400", &(0x7f0000002000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000006000-0x18)="57966d8ecd4f5f42aad32d17bf4cfd172c284147ac92dffd", 0x18, 0xffffffffffffffff) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000007000-0x4)=0x7fff) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000005000-0x4)=0x9, 0x1, 0x6, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000008000-0x4)=0x4, 0x2) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000005000)=0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000009000-0xc)={0x0, r0, 0x1}, 0xc) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000007000)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000009000)={0x8, 0x10, 0x10000, 0x6, "4620159b62175e78a65ee7fa0ae91c3afe2620ee484c1be89d8681184894d773"}) 2017/08/28 03:15:19 executing program 4: 2017/08/28 03:15:19 executing program 6: 2017/08/28 03:15:19 executing program 5: 2017/08/28 03:15:20 executing program 0: 2017/08/28 03:15:20 executing program 0: 2017/08/28 03:15:20 executing program 0: 2017/08/28 03:15:20 executing program 0: 2017/08/28 03:15:20 executing program 2: 2017/08/28 03:15:20 executing program 0: 2017/08/28 03:15:20 executing program 2: 2017/08/28 03:15:20 executing program 0: 2017/08/28 03:15:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000049e000)="2f6465762f73672300", 0xce, 0x151842) r1 = gettid() setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00006b8000)={0xffffffffffffed8c}, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000cb7000)=0x100, 0x4) syz_open_dev$sg(&(0x7f0000ee7000-0x9)="2f6465762f73672300", 0x42, 0x44c103) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x800000000003, 0x4) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00008d4000)=r2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000466000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r3, 0x29, 0x100000000001b, &(0x7f0000de3000+0xe11)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r4}, 0x14) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000692000-0x18)={0x7, 0x7, 0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000b4d000-0x30)={0x1, 0x2, &(0x7f0000ef3000)=[@generic={0x8db7, 0x0, 0x0, 0x0}, @generic={0xd395, 0x0, 0x0, 0x0}], &(0x7f0000b4d000)="737973654f00", 0x1, 0x80, &(0x7f000000a000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, 0x30) r8 = socket$kcm(0x29, 0x5, 0x0) writev(r8, &(0x7f0000a71000)=[{&(0x7f0000cff000)="1e3b039789017fa88d5499778260b71294d509ab2387d26092c7abe33ce26f8b5017611622e83a056ab0c33e34e0ad409e1b78e643a3a92a5db49f3887350490467c8e680afc422e54035c903b478559db01cddfe2b06ce73dedee19a3658509d5dc05210382e0347bfb11ede2634db8ea05c50417a8253e4b44b39f1e82fff5ab0e0c63c99b7e95d1226bdbedae788ad108e6083cc15a2a86ec69678c9a588090cd172a0753ba5efce81008111c3e2fae1a651ba169d3158568", 0xba}, {&(0x7f0000653000)="08073b9238584f6d9d677f50b83949e1923c5bd4656f15a69d4546a047c0babaf7aee443239c679dcdb833fed231d40d639bdb4d24a5d63eb40b61e450881997477e4a900b07116a46646cc917d979938d4e3495488ce08b3b42c519c7a7516dfb937f16e11411f5de4b04fb2bcd4fcaf0d93c25b7f4f0a60e48f1f8a04367977658f7fa44c9e2fbb9febedbff0d8d8b4554e998217dc197edf5735987beba8b6b361b3969e9e83ccef895c68d651d0da1594b7a7c5620d738c714f2", 0xbc}, {&(0x7f0000fe1000)="addaf8e9cad44bdeca99b1c6baa528391bb1897c", 0x14}, {&(0x7f0000838000-0xf5)="d19d7e86e60ddbaff04f27d3cde2c7cffb2a54f4579161a8b27872e8f683846ec1b7b7f8dd9e17082682f9c7aa1fd3ed7525b6eaae40a25c69e58af0d0f5704b08bc16610943e44f38dc22371bf5979af43cff3d9b96605f7fdde410bd29b7f5cdf0ceb77472eb24fd2f6c9c3b4b0569d8c51157a5b83456c2df54c1882bdb84df538b9a92bd7e9c4888f7cc8ef3a9424b3d9f4efd7f1579094d2f40c1bd87d2a4b8e44d42385124718f19796a1ad76e80bb880ea25b27abbd742fc4a1f2f99a092195a7ae48a98058812222fd6a25418eebdbe876cd20413fc75df0bc48ce96a379036fd4a85db9ba619c64912542e88a5227ab83", 0xf5}, {&(0x7f00007fe000-0x3c)="8c74ffa89369d138fcbf366fb6a91a94786957d0f45262d9c60b40e9dd7dd032d73fb41fb4bd14cdb97a61663eaed37bf5c82afe8080ae9a1b469589", 0x3c}, {&(0x7f0000a4f000-0xec)="e86b17a0154439eaa4ebb168cdaf256e66c793b7e3a9c5d99414ec364119e391457b84045bc899961c272e76a9e538cb1c25a005d502eaf6a421058a18d0d56f51d16d8a3ee3fe14aec070e8fb38a42f25925ad4988cd47b24f9d971adf80d732c39f0e292fe5a08f42df9bd2ce996dd8e75bad076e9b85aa6d32d729534efb81f253952d143a1a6ead9723bc97b402ee757666321fa0f3b3b96de16a00d02ad38aceb5b55922c5572609f5720dc6fe59b94d391cf465239c48299df72568c0ba06e33e02b968e42fa32ff2a6a891f882dfd666e69dfc687048a584fcb975510574c434eda20935277760517", 0xec}, {&(0x7f000036f000)="b57b4b7aeac71cbbb2b82a299bcc01f212734a8434845a426315b7f56eedcbb204c867d0ea6224bf9d3ae5f4d8a0605b9930356990d3b543053c5d14e6c6591576ae5950202af8c5d9a6e892dbbb508ae657bdcee0890dad478884df7bf4423e47934129923fb60a295572eb089aa0719b17ebf99617607432b693e413020bc72d2ce1d099f16954add6a13da7c0948342ab9f2d5e2a46cad15cde326f3bbd88fdfe6429e95adb409c518f8a", 0xac}], 0x7) r9 = dup3(r8, r6, 0x7fffe) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000c55000-0x4)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000a69000-0x4)=r10) r11 = add_key(&(0x7f0000596000-0x8)="6269675f6b657900", &(0x7f00008d8000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f00004ce000-0x1000)="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", 0x1000, 0xfffffffffffffffc) r12 = request_key(&(0x7f000070c000-0x5)="7573657200", &(0x7f0000dcf000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000b58000)="737973654f00", 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r11, &(0x7f0000af2000)=[{&(0x7f00008eb000)="abf3ace395392f564b6ec5dc7939f99b95d75fb5d97a9bbd11dd0af2a2b07f7dfb549db0264abfe36a9b69c68eae60b784d7760805319a4d9f8f84d82aa52475afa89955070705f2539d6dbca3adaa8c33fcb990c7a2a8bd86e4662e2a24a5aa6e51715370412640ba7cfc1a2a53f2b2d8062f9f9a30330f48540d8568f22e76f608c566c3de98f9c855821d99d45666644fbd7b06153140bc255d8b8cb356a700387782036fa8623be474c0c8c74226add26f20e2ffb2b5c3569e28f7c8dc4faa9dda1af15b57ea", 0xc8}], 0x1, r12) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f000070c000-0x8)={r5, r7}) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f000038c000-0x4)=0x260f, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000087000-0x8)={r5, r7}) 2017/08/28 03:15:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000166000)="2f6465762f6c6f6f702300", 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000e22000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000009000-0x8)=0x3f) setns(r2, 0x40000000) recvfrom(r3, &(0x7f0000fb6000)="", 0x0, 0x0, &(0x7f000074e000)=@ax25={0x6, {"1b13e808009f33"}, 0x0}, 0x10) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) r4 = memfd_create(&(0x7f0000047000-0x6)="2747504c3a00", 0x0) ftruncate(r4, 0x4ee4) pwrite64(r4, &(0x7f0000801000-0x1)="6d", 0x1, 0x0) pipe(&(0x7f00000b9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000c47000-0x4)="2e2f66696c653000", 0x480400, 0x32) ioctl$TIOCLINUX6(r7, 0x541c, &(0x7f0000db0000-0x2)={0x6, 0x5}) syz_open_dev$ircomm(&(0x7f0000d89000-0xd)="2f6465762f6972636f6d6d2300", 0x5, 0x101180) sendfile(r6, r4, &(0x7f000000c000)=0x0, 0x2ea96fac) r8 = syz_open_dev$urandom(&(0x7f0000009000-0xd)="2f6465762f7572616e646f6d00", 0x0, 0x800) openat$rtc(0xffffffffffffff9c, &(0x7f0000e8b000)="2f6465762f72746300", 0x40002, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f000033b000)={0x0, 0x0, 0x0}, &(0x7f0000800000-0x4)=0xc) splice(r8, 0x0, r6, 0x0, 0x100000000, 0x0) splice(r5, 0x0, r4, 0x800000, 0xfffffdff, 0x0) execve(&(0x7f0000020000-0x8)="2e2f66696c653000", &(0x7f0000e22000-0x10)=[&(0x7f0000706000-0x18)="272307776c616e313a2e6c6f6b657972696e672b246c6f00", &(0x7f00007c7000)="2f6465762f6972636f6d6d2300"], &(0x7f0000e4c000-0x20)=[&(0x7f000082a000-0xb)="2f6465762f6c6f6f702300", &(0x7f0000e7a000-0x22)="73656c696e75786367726f7570267070703173656375726974793a3a776c616e3000", &(0x7f0000a08000)="2f6465762f72746300", &(0x7f0000b22000)="2f6465762f6972636f6d6d2300"]) fsync(r0) semget$private(0x0, 0x4, 0x102) r9 = getpid() tkill(r9, 0x200000000000013) syzkaller login: [ 62.160404] BUG: unable to handle kernel NULL pointer dereference at 0000000000000286 [ 62.168505] IP: 0x286 [ 62.170896] PGD 1c9814067 [ 62.170900] P4D 1c9814067 [ 62.173725] PUD 1c98df067 [ 62.176557] PMD 0 [ 62.179382] [ 62.183117] Oops: 0010 [#1] SMP KASAN [ 62.186898] Dumping ftrace buffer: [ 62.190414] (ftrace buffer empty) [ 62.194107] Modules linked in: [ 62.197301] CPU: 0 PID: 28 Comm: kworker/u4:2 Not tainted 4.13.0-rc6-next-20170825+ #9 [ 62.205336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.214686] Workqueue: kstrp strp_work [ 62.218561] task: ffff8801d99a2100 task.stack: ffff8801d99c0000 [ 62.224592] RIP: 0010:0x286 [ 62.227494] RSP: 0018:ffff8801d99c7520 EFLAGS: 00010246 [ 62.232832] RAX: dffffc0000000000 RBX: ffff8801c948bb78 RCX: 0000000000000000 [ 62.240076] RDX: 1ffff10039291781 RSI: ffffffff85b37b20 RDI: ffff8801c948ba48 [ 62.247319] RBP: ffff8801d99c7538 R08: ffff8801d99c6e98 R09: ffff8801d99c6ea8 [ 62.254562] R10: ffff8801d99c6e20 R11: 1ffff1003b3346b3 R12: ffff8801c948ba48 [ 62.261806] R13: ffff8801d990c618 R14: ffff8801d99c7980 R15: ffff8801d990c600 [ 62.269056] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 62.277261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.283117] CR2: 0000000000000286 CR3: 00000001c9815000 CR4: 00000000001406f0 [ 62.290366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.297614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.304857] Call Trace: [ 62.307423] ? strp_work+0x41/0xf0 [ 62.310943] process_one_work+0xbfd/0x1be0 [ 62.315153] ? check_noncircular+0x20/0x20 [ 62.319372] ? pwq_dec_nr_in_flight+0x450/0x450 [ 62.324014] ? finish_task_switch+0x1d3/0x740 [ 62.328484] ? finish_task_switch+0x1aa/0x740 [ 62.332976] ? __sched_text_start+0x8/0x8 [ 62.337100] ? check_noncircular+0x20/0x20 [ 62.341312] ? check_noncircular+0x20/0x20 [ 62.345524] ? select_task_rq_fair+0x3da/0x3380 [ 62.350174] ? find_held_lock+0x39/0x1d0 [ 62.354228] ? lock_acquire+0x1d5/0x580 [ 62.358177] ? worker_thread+0x4a3/0x1860 [ 62.362308] ? lock_release+0xd70/0xd70 [ 62.366259] ? do_raw_spin_trylock+0x190/0x190 [ 62.370818] ? pr_cont_work+0x130/0x130 [ 62.374782] worker_thread+0x223/0x1860 [ 62.378768] ? process_one_work+0x1be0/0x1be0 [ 62.383240] ? check_noncircular+0x20/0x20 [ 62.387455] ? _raw_spin_unlock_irq+0x27/0x70 [ 62.391930] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 62.396926] ? trace_hardirqs_on+0xd/0x10 [ 62.401052] ? _raw_spin_unlock_irq+0x27/0x70 [ 62.405523] ? finish_task_switch+0x1d3/0x740 [ 62.409992] ? finish_task_switch+0x1aa/0x740 [ 62.414471] ? preempt_notifier_dec+0x20/0x20 [ 62.418952] ? __schedule+0x8f0/0x2070 [ 62.422823] ? try_to_wake_up+0xf9/0x1600 [ 62.426947] ? lock_commit_crosslock+0xe73/0x1d10 [ 62.431772] ? find_held_lock+0x39/0x1d0 [ 62.435817] ? lock_downgrade+0x990/0x990 [ 62.439946] ? complete+0x18/0x80 [ 62.443384] ? __schedule+0x2070/0x2070 [ 62.447341] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 62.452421] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 62.457412] ? trace_hardirqs_on+0xd/0x10 [ 62.461537] ? __kthread_parkme+0x173/0x240 [ 62.465839] kthread+0x39c/0x470 [ 62.469183] ? process_one_work+0x1be0/0x1be0 [ 62.473651] ? kthread_create_on_node+0x100/0x100 [ 62.478477] ret_from_fork+0x2a/0x40 [ 62.482176] Code: Bad RIP value. [ 62.485609] RIP: 0x286 RSP: ffff8801d99c7520 [ 62.489988] CR2: 0000000000000286 [ 62.493420] ---[ end trace 670d9fbccaf43975 ]--- [ 62.498149] Kernel panic - not syncing: Fatal exception [ 62.503814] Dumping ftrace buffer: [ 62.507330] (ftrace buffer empty) [ 62.511005] Kernel Offset: disabled [ 62.514598] Rebooting in 86400 seconds..