INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-0,10.128.15.203' (ECDSA) to the list of known hosts. 2017/10/13 21:59:23 fuzzer started 2017/10/13 21:59:23 dialing manager at 10.128.0.26:34897 2017/10/13 21:59:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x100000000) r0 = socket$inet6(0xa, 0x3, 0x7f) bind$inet6(r0, &(0x7f00001e3000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000a76000-0xdb)="76", 0x1, 0x0, &(0x7f0000d10000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f000043e000-0x98)="", 0x0, 0x0, &(0x7f00009c5000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00007c2000)=0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00001c8000)={0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00008c8000)=0x5, 0x4) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000fa0000-0x10)={0x0, 0x0, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000ba3000)=0x10, 0x800) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00002b0000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0xaa}) r2 = socket(0x11, 0x10000000803, 0x9) sendto(r2, &(0x7f000041d000)="28f2aab751504076fdda27e40740808739410f9505840cdc650660d6d2cffc59f9fda3283591bda0c8ffbb28e8840ef96f86c1fcaf9a8d821e09968e77d83ddb307afac18c0b5e8de5cad70987d28997562066270733f33b782087740b1969af780d8ab354c87f5328f140198f76fce3273f30d0cf09b806b26f51c720af35c8339db98d01000000547d4c1bb4bedf89b607d62c864718fb8eb7b98938cc0b2f6327b62a6da482ebe6b49d41a24e09f373fd973ed2869179ded67a2481611f03734c679a09f59b24", 0xc8, 0x40000, &(0x7f0000fa1000)=@l2={0x1f, 0x43d, {0x8, 0x0, 0x8, 0x1, 0x3, 0x7fffffff}, 0xe83, 0x3}, 0xe) r3 = accept4$inet(r1, &(0x7f0000781000)={0x0, 0x0, @remote={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d7d000)=0x10, 0x80800) shutdown(r3, 0x1) setsockopt(r2, 0x107, 0xf, &(0x7f0000155000)="2000016f", 0x4) vmsplice(r3, &(0x7f0000fa0000-0x10)=[], 0x0, 0x9) setsockopt$inet_udp_int(r2, 0x11, 0x40066, &(0x7f0000624000)=0x8001, 0x4) sendmmsg$nfc_llcp(r2, &(0x7f0000ee5000-0x70)=[{&(0x7f0000e3c000-0x60)={0x27, 0x2000000001, 0x7, 0x6, 0x0, 0xfffffffffffffffd, "a284027e94775bb0a61c0a37f98a86d1539bcef05a11311b56eb8e513afa218479b8c54121276c0a006715b1dd24ab77a39ed8c2a4da5ab82afb820330e4fe", 0x8}, 0x60, &(0x7f0000a2c000-0x30)=[{&(0x7f0000f12000)="cb0400000099d70103ffd50bffffffff0600000000000000057a61a027", 0x1d}, {&(0x7f0000fa8000-0x8f)="538c0000da0420212285d1cbfc7fcfd88fdd03000000f216dc04b57b03396cfeb3c348a2342a000000802345c5efb7ce05151d907c581ac99cba5ad5b2e1133ec46f3951724b000040668b00e30600bb393066570361de74026ff8ccfa4892c9dd371d2fc15253607fec13c40e6fe0ff79feffcf1d9cb7055ec23bd5a4dcedac017bb837844c96f45d74daf4773ace", 0x8f}, {&(0x7f0000d4e000)="0a251751c4a40c9c5695c2ec3b594182c1549c4089e1a665e9e0174637324ddbd77ab6233d8f8b8d8dcce846dcb7f3a9f561c29d06e5c38fa4069fd4d671c41c717747204f3cdeebf96d818d63775fec9145d7a9ffc39971fd698761dc6d55786cd8335f2be49869945668741ea28cd897703d0974d8f9e86ed35d09c67aa444305df2dfa44115ab438cc78bfc7a13e032174796a2bdf9", 0x97}], 0x3, &(0x7f0000faa000)={0xf0, 0x8b, 0x9, "b92c7480bf113cb3beda5fb2a4c524ce04d00cb2d68d8be26248fbf64ca65c3c688f0ac86300dabdee69c5643dad02002868bf8c0000000f00000fffa6a2df8b709000809bfb01e9f3cae7a8fe1b60d8c4e3bc5b90ba03cb95720e5b9fd1a0c02cdce1d790df02a5a27835270bfc5ca8d11a77dcbeebc73323495d6f6f4c253842f8d78f46a14731c2efcb35766481a53ef76ac18a118e25905c39eb12a139af886d09f05dd4858df03771559c96e62c8b10472b6c8934c0dd32c5cf5589e5dd71f38f39b4cdcba3440f5cb9aa7376bb6db2030df650ef146ad9"}, 0xf0, 0x20000080}, {&(0x7f0000d06000)={0x27, 0x1ff, 0x4, 0x5, 0x6, 0x2, "dec4268683590a3fbdd19c5347a5f6f92d045a6cf9245d4f7558798ff33e310d6d1c866edfc3623165e0184163396d476ec8cb9d074e0ec7a0f3de8e40bee4", 0x2}, 0x60, &(0x7f0000fa7000-0x50)=[], 0x0, &(0x7f0000fab000)={0x28, 0x1ff, 0xfffffffffffffffe, "287cc081a0000024c9dc3764040603d49cd4"}, 0x28, 0x4000}], 0x2, 0x20040000) sendfile(r3, r2, &(0x7f0000fac000-0x8)=0x0, 0x81) getpid() bind$inet(r1, &(0x7f0000fa5000-0x10)={0x2, 0x2, @rand_addr=0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/10/13 21:59:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f000018e000-0x4)={0xffffffffffffff9c}) syz_emit_ethernet(0x4e, &(0x7f00004b9000-0xb2)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x20086dd, @ipv6={0x0, 0x6, "a228af", 0x18, 0x88, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}}}}}}}) 2017/10/13 21:59:32 executing program 3: r0 = gettid() clone(0x0, &(0x7f000054c000)="", &(0x7f0000cd6000-0x4)=0x0, &(0x7f0000ef6000-0x4)=0x0, &(0x7f00000a3000-0x65)="") sched_setaffinity(r0, 0x8, &(0x7f0000764000)=0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet(r1, &(0x7f0000499000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x10) 2017/10/13 21:59:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = syz_open_dev$usbmon(&(0x7f0000412000)="2f6465762f7573626d6f6e2300", 0x6, 0x100) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000bc0000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00007b8000-0x4)=0x0) poll(&(0x7f0000b2c000)=[], 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000d33000)="2f6465762f73672300", 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000ed2000)={0x0, 0x0, &(0x7f000000c000-0x30)=[{&(0x7f0000007000)=[{0x1b, 0x0, 0x0, 0x800006, 0x80, "ac1b910000000800090081"}], 0x1b}], 0x1, &(0x7f000000a000)=[], 0x0, 0x800000000}, 0x1) ioctl(r1, 0x2285, &(0x7f0000007000)="53") eventfd(0x401) ppoll(&(0x7f0000670000-0x18)=[{r1, 0x40, 0x0}, {r1, 0x8, 0x0}, {r1, 0x200, 0x0}], 0x3, &(0x7f0000a10000)={0x0, 0x0}, &(0x7f0000ca4000)={0x1}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000d6d000+0x795)="2f6465762f70746d7800", 0x4000, 0x0) clone(0x0, &(0x7f0000290000)="", &(0x7f0000b02000)=0x0, &(0x7f00000ab000-0x4)=0x0, &(0x7f00005c5000)="") 2017/10/13 21:59:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x10000000803, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000155000)="2000016f", 0x4) sendmmsg$nfc_llcp(r0, &(0x7f0000ee5000-0x70)=[{&(0x7f0000e3c000-0x60)={0x27, 0x2000000001, 0x0, 0x0, 0x0, 0x0, "a284027e94775bb0a61c0a37f98a86d1539bcef05a11311b56eb8e513afa218479b8c54121276c0a006715b1dd24ab77a39ed8c2a4da5ab82afb820330e4fe", 0x0}, 0x60, &(0x7f0000a2c000-0x30)=[{&(0x7f0000f12000)="cb0400000099d70103ff", 0xa}, {&(0x7f0000d4e000)="0a251751c4a40c9c5695c2ec3b594182c1549c4089e1a665e9e0174637324ddbd77ab6233d8f8b8d8dcce846dcb7f3a9f561c29d06e5c38fa4069fd4d671c41c717747204f3cdeebf96d818d63775fec9145d7a9ffc39971fd698761dc6d55786cd8335f2be49869945668741ea28cd897703d0974d8f9e86ed35d09c67aa444305df2dfa44115ab438cc78bfc7a13e032174796a2bdf9", 0x97}], 0x2, &(0x7f0000faa000)={0xf0, 0x8b, 0x9, "b92c7480bf113cb3beda5fb2a4c524ce04d00cb2d68d8be26248fbf64ca65c3c688f0ac86300dabdee69c5643dad02002868bf8c0000000f00000fffa6a2df8b709000809bfb01e9f3cae7a8fe1b60d8c4e3bc5b90ba03cb95720e5b9fd1a0c02cdce1d790df02a5a27835270bfc5ca8d11a77dcbeebc73323495d6f6f4c253842f8d78f46a14731c2efcb35766481a53ef76ac18a118e25905c39eb12a139af886d09f05dd4858df03771559c96e62c8b10472b6c8934c0dd32c5cf5589e5dd71f38f39b4cdcba3440f5cb9aa7376bb6db2030df650ef146ad9"}, 0xf0, 0x20000080}], 0x1, 0x20040000) sendfile(0xffffffffffffffff, r0, &(0x7f0000fac000-0x8)=0x0, 0x81) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00006d1000)={0x2, 0x78, 0x2a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) r2 = memfd_create(&(0x7f000010b000-0x2)="2500", 0x2) bind$ipx(r2, &(0x7f00006ba000-0x10)={0x4, 0x8, 0x8, "8b0f56939dd0", 0x7, 0x0}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000c6f000)="2f6465762f7573626d6f6e2300", 0x2, 0x40102) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000dbe000)={0x0, 0x0, 0xf9fe}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000cee000-0x8)={r4, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000976000)=0x10075) mkdir(&(0x7f00000e9000-0x8)="2e2f66696c653000", 0x80) mount(&(0x7f00005aa000-0x8)="2e2f66696c653000", &(0x7f0000027000)="2e2f66696c653000", &(0x7f0000ced000-0x6)="72616d667300", 0x50, &(0x7f000000a000)="") r5 = creat(&(0x7f0000016000-0xc)="2e2f66696c65302f62757300", 0x10a) fcntl$lock(r5, 0x6, &(0x7f0000f69000)={0x1, 0x0, 0x0, 0x0, 0x0}) setns(r2, 0x40000000) ioctl$void(r5, 0x5450) mmap(&(0x7f0000308000/0x1000)=nil, 0x1000, 0x0, 0x100000051, r5, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) exit(0x0) mmap(&(0x7f0000000000/0x7ca000)=nil, 0x7ca000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/10/13 21:59:32 executing program 2: r0 = gettid() clone(0x0, &(0x7f000054c000)="", &(0x7f0000cd6000-0x4)=0x0, &(0x7f0000ef6000-0x4)=0x0, &(0x7f00000a3000-0x65)="") r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000001000-0x8)="2e2f66696c653000") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace(0x421f, r0) getpeername$inet(r1, &(0x7f0000000000)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x10) 2017/10/13 21:59:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x43, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000f32000)=@in6={0x0, 0x0, 0x0, @local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000099000)=0x1c, 0x0) futex(&(0x7f00000c3000)=0x8001, 0x0, 0xb47a, &(0x7f00007b1000)={0x0, 0x0}, &(0x7f00003d5000)=0x8, 0x12727b27) r1 = syz_open_dev$usbmon(&(0x7f0000d63000)="2f6465762f7573626d6f6e2300", 0x9, 0x101000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00003bd000-0x4)=0x0) stat(&(0x7f0000f17000-0x8)="2e2f66696c653000", &(0x7f0000411000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00002fb000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) sendmsg$unix(r1, &(0x7f0000ba0000)={&(0x7f0000d7c000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f00009d3000-0x70)=[{&(0x7f0000382000)="8bc8897ccfd33e7c93e06205b630a491d8e6bace1035602bcf251a6ba113d916593dc78c80d8a23290cb1a9ad139efc9bd121a9468ed920204922a58585b4e6569b89f5b", 0x44}, {&(0x7f0000498000)="84219ac5c3b6e317aab800eb8b0dc358abf5ef3c0cbbf6f7dfae7b9497a406bc6ebb2ea9be1631b1919b2c6e721e2f32a280730fc8210b7a49c947f4b5747549ee6045ae880d894b9a558fd3853d2b0aa7afe681859c102700638eb994cd6d85256bf27dd2cb70542edb2a378d3d5eb876109b9d5e04e737593423bcb53a43900fcb8e0e893c4d39250cec43a4a3be87739d0ec82f406b0e640474ce3ae352dbf188362118bbd58600dab82cf05c3305c83e8c4df14eef8b8acf5e40e0378194a6a21a324afff2065af21c8a9f0bc8a514a3220b593f9ec2da0239dc9a8e81167d201352fe2140e8f53559fcd10bb0a5cea9dfaed92550", 0xf7}, {&(0x7f00005f0000)="", 0x0}, {&(0x7f00005c9000)="58b9d2e932bcea195e491cda782d13b99816139985bab807ca68419cc32795753bdb1dbc48bb9001fbb91c755852deacae4902010903cd46a0082d4e8038ba75b62cd4b069e3d11655bc00235ca226522ef216bb971342411a048db2c20214ab7b4569ac37b7595f1f59ca04706633450b1cd9f039905218ed431c0d9bde3ce78f3ce8c86539b5dba98760689b00", 0x8e}, {&(0x7f0000530000)="d04eb3892b1687bfe4d4ee9ca64909eb5a0a14b341432168b5408bd30b3fe75096321db632f446782e70d0900c58c8a46676e3a39e95c6a85e65110b8f93c16830477cadd6abecb55ddf4b0795a58311754cea164a9624eb49fe738ddedd6c8f372ff37f7e210e36066fd2", 0x6b}, {&(0x7f00006f9000-0xcd)="69f9083053f772b9fac4228eb48bef2cfe2ebd8574962e1d5b570c0e76bf4f46b82b5da173d6da9da1c8934cb0e1dceff6d3a2f9578e7b92bfa8e81df8468083f1cac716e8da09f6c05084cae5ce0e872216d29c717296f71b23532647edf4b5cc9faebdfa41068f9a761aae0a9ab75124a32f9707dab3f06e0b2dd5ee74b4dbef21ea22ee445bb53b3dcd81bd5b9e040ad3e0827e229e3cd4dee5ee22b0fe3c785a994ddfbbe90dfd10df964b8dca8f886a311417cffdb63523c6b03efdbdb91c07864c925c2bd3b68d2947a0", 0xcd}, {&(0x7f0000bbb000-0xae)="3dd7c2527ce3a1f520d71ea24aa57e80a2bac3ee91591b67bfa5a46eb352e05a4e1bbf645fcf9cda651514ff854b0cb6f359364dff9339759b40633ab01b598593ffb23852f17b59c931cebd3a2bf03518779120cd2824fd20b198caa98657ed38a4acb2752c23df106cc333db1037bb972fb18a4d9e704db7c7d8f459a84202b1c28b03fc90cece13239fa0f8bade00ecfabb8f716f49360dbf5d008d3b8658b5876282a253c10b90e9e5b77499", 0xae}], 0x7, &(0x7f000056e000)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r1, r0, r0]}], 0x2, 0xc0}, 0x8000) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = inotify_init1(0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f000063d000)={0x0, 0x0, 0x0}, &(0x7f0000eae000-0x4)=0xc) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 2017/10/13 21:59:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000dce000-0x10)=[], 0x0) fchdir(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00007b8000-0x4)=0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) poll(&(0x7f0000b2c000)=[], 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000d6d000+0x795)="2f6465762f70746d7800", 0x4000, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000ad8000-0x6f)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r3 = dup2(r0, r1) readv(0xffffffffffffffff, &(0x7f0000dbc000-0x10)=[], 0x0) clone(0x0, &(0x7f0000290000)="", &(0x7f0000b02000)=0x0, &(0x7f00000ab000-0x4)=0x0, &(0x7f00005c5000)="") fcntl$setown(r3, 0x8, 0x0) pselect6(0x40, &(0x7f0000aac000-0x40)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8e0}, &(0x7f000014f000-0x40)={0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0}, &(0x7f0000bbc000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000001000-0x10)={0x77359400, 0x0}, &(0x7f0000000000)={&(0x7f0000000000)={0x200}, 0x8}) 2017/10/13 21:59:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f000018e000-0x4)={0xffffffffffffff9c}) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020e000)={0x0, 0x33, "e62b59347d6b33f364f044b41d04d0459f33c9bf66e8fbc1ec91ce415bd273a40f09a9ad344ffa7d4f2f79c857738ee60498a8"}, &(0x7f0000895000-0x4)=0x3b) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f000059b000)={0x0, 0x74b}, &(0x7f0000f4a000)=0x6) getsockopt$inet6_tcp_TCP_PSP_CHECK(r1, 0x6, 0x6c7, &(0x7f0000e88000-0x4)=0x0, &(0x7f0000739000-0x4)=0x4) r2 = syz_open_dev$loop(&(0x7f0000cda000)="2f6465762f6c6f6f702300", 0x16, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x0, 0x1) clock_nanosleep(0x7, 0x1, &(0x7f0000e66000)={0x0, 0x0}, &(0x7f0000574000)={0x0, 0x0}) write$sndseq(r3, &(0x7f00005cc000-0x90)=[{0x0, 0x0, 0x0, 0x4, @time={0x0, r4}, {0x0, 0x0}, {0x0, 0x0}, @result={0x0, 0xb97}}, {0x0, 0x0, 0x0, 0x0, @tick=0x0, {0xffffffffffffffff, 0x0}, {0x0, 0x7}, @connect={{0x1, 0x8513}, {0x1, 0x10001}}}], 0x60) read(r3, &(0x7f00002f0000-0x25)="00000000000000000000000000000000000000000000000000000000000000000000000000", 0x25) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00004b9000-0xb2)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x20086dd, @ipv6={0xffd, 0x6, "a228af", 0x18, 0x88, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @icmpv6=@mld={0x84, 0x0, 0x0, 0x9, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}}}}}}}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000181000)={0xa, 0x2, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8000005}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000f06000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f06000-0x4)=0x9, 0x4) recvmsg(r7, &(0x7f0000f09000-0x38)={&(0x7f0000f05000)=@in={0x0, 0x0, @remote={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000865000-0x90)=[{&(0x7f0000f09000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x31}, {&(0x7f0000f0a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000000000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xef}, {&(0x7f0000f0c000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000660000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87}, {&(0x7f0000f0d000-0xf1)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf1}, {&(0x7f0000f0e000-0x1a)="0000000000000000000000000000000000000000000000000000", 0x1a}, {&(0x7f0000f0e000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6a}, {&(0x7f0000f0f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x97}], 0x9, &(0x7f0000c2a000+0x226)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x75, 0x4}, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000292000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000209000)=[@in={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x50d}, @in6={0xa, 0x2, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4030}], 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f000060b000)=0x0, &(0x7f000043a000)=0x4) getsockopt$inet6_buf(r7, 0x29, 0xd2, &(0x7f0000123000-0x10)="00000000000000000000000000000000", &(0x7f0000651000-0x4)=0x10) connect$inet6(r0, &(0x7f0000c2f000-0x1c)={0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x9}, 0x1c) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f00006c8000-0x5f)={0x0, {{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f000023c000)={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) syz_emit_ethernet(0x42b, &(0x7f0000c19000-0x42b)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="7c02aa24bfdb", [], {{0x800, @ipv4={{0x7, 0x4, 0x0, 0x0, 0x41d, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[@end={0x0}, @generic={0x88, 0x6, "5f52d475"}]}}, @dccp={{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, "d7cc2d", 0x0, "1400f1"}, "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"}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000dee000)={@common="62637368300000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/10/13 21:59:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f000041f000-0x10)={0x0, 0x0, 0x100}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00007b3000)={0x0, 0x0, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000321000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00004ce000)={r2, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f000099a000)={r3, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f000030a000)={r4, r3, 0x40000000000000}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000c8f000-0x8)={0x0, 0x0}) r6 = syz_open_dev$vcsn(&(0x7f0000108000)="2f6465762f7663732300", 0xb0, 0x4000) r7 = accept4(r6, &(0x7f0000985000)=@ethernet={0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00006c0000-0x4)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000050000-0x4)=0x0, &(0x7f0000a3d000-0x4)=0x4) syz_emit_ethernet(0x3f, &(0x7f00009ae000-0x3f)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x20086dd, @ipv6={0x0, 0x6, "a23f07", 0x9, 0x2f, 0x0, @loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {[], @udp={0x3, 0x2, 0x9, 0x0, "f9"}}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000b66000-0x30)={0x1, 0x2, &(0x7f0000b66000)=[@generic={0xb69, 0x1000010f510, 0x1c, 0x0}, @generic={0x9595, 0x0, 0x0, 0x0}], &(0x7f000051d000-0x2)="cb49", 0x9, 0x80, &(0x7f0000b62000-0x80)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000fc8000-0x14)={0xf, 0x101, 0xfffffffffffffffa, 0x1, 0x2, 0x0, 0x0}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00007a8000)={0x6, 0x5, 0x6, 0x85e9, 0x800800000005, 0x0, 0x4}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) 2017/10/13 21:59:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000976000)=0x75) openat$kvm(0xffffffffffffff9c, &(0x7f0000afc000-0x9)="2f6465762f6b766d00", 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000)=0x10) socketpair(0x1, 0x3, 0x3f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000474000-0xc)={0x0, 0x0, 0x0}, 0xc) sync() clone(0x0, &(0x7f00000db000-0x3)="c9375a", &(0x7f0000a9e000-0x4)=0x0, &(0x7f0000441000)=0x0, &(0x7f0000664000)="") 2017/10/13 21:59:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r0, 0x8) syz_emit_ethernet(0x3b, &(0x7f000001a000-0x43)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="4c6112cc15d8", [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2, ""}]}}, {"2e"}}}}}}) syz_extract_tcp_res(&(0x7f000001b000-0x8)={0x42424242, 0x42424242}, 0x100000001, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000014000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, r2, r1, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@eol={0x0}, @nop={0x1}, @md5sig={0x13, 0x12, "cbec353806dfa83f185e80faeda403eb"}]}}, {"0c6427f1"}}}}}}) syz_extract_tcp_res(&(0x7f0000015000)={0x42424242, 0x42424242}, 0x100000000, 0x800000000004) syz_emit_ethernet(0x3c, &(0x7f0000735000-0x3c)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x6, 0x4, 0x0, 0xfffffffffffffffc, 0x2e, 0x0, 0x0, 0x6, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[@noop={0x1}]}}, @tcp={{0x1, 0x0, r4, r3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, {[]}}, {"0c10"}}}}}}) syz_extract_tcp_res(&(0x7f0000ecd000)={0x42424242, 0x42424242}, 0x0, 0x5) syz_emit_ethernet(0x38, &(0x7f0000004000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="eeeb05010900", [], {{0x800, @ipv4={{0x5, 0x4, 0xfffffffffffffffe, 0x2, 0x2a, 0x2, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, r6, r5, 0x0, 0x0, 0x5, 0x2000000000000011, 0x0, 0x0, 0x7, {[]}}, {"3702"}}}}}}) 2017/10/13 21:59:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000686000-0xa)="2f6465762f7663732300", 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000a76000-0xdb)="76", 0x1, 0x0, &(0x7f0000d10000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000f9b000)={0x0, 0x0, 0x0}, &(0x7f00006ab000)=0xc) lstat(&(0x7f000072b000)="2e2f66696c653000", &(0x7f00003a3000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f000095f000)="2e2f66696c653000", &(0x7f0000b8a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00008a8000)={0x0, 0x3}, &(0x7f00004db000-0x4)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00003d9000)={r5, 0x9, 0x5, 0xa7, 0xffffffffffffffaf, 0x7fffffff}, &(0x7f0000ec8000)=0x14) ioctl$KVM_SMI(r0, 0xaeb7) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000033d000-0xc)={r2, r3, r4}, 0xc) sendto$inet6(r1, &(0x7f000043e000-0x98)="c3", 0x1, 0x0, &(0x7f00009c5000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r6 = getgid() setgid(r6) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00004ea000)={0x10001, 0x2, 0xc7df, 0x2000000000000008, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x6, 0xfffffffffffffffd, 0x0}, 0xb) r7 = epoll_create1(0x80005) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f00007e6000-0xc)={0x0, 0x0}) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000cdb000)={0x0, @in={{0x2, 0x1, @rand_addr=0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x1ff, 0x5, 0x2, 0x8}, &(0x7f0000624000)=0xa0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000bef000-0x4)=r8, 0x4) 2017/10/13 21:59:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) unshare(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000b62000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x2}, 0x1c) poll(&(0x7f0000a73000)=[{0xffffffffffffffff, 0x1089, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {r0, 0x0, 0x0}], 0x3, 0xfffffffffffffffb) sendto$inet6(r0, &(0x7f0000b1d000-0x1)="e4", 0x1, 0x0, &(0x7f0000cf0000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xff}, 0x1c) perf_event_open(&(0x7f0000989000-0x78)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000ff9000)={0x0, @multicast2=0x0, @multicast1=0x0}, &(0x7f0000347000-0x4)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf0f000)=nil, 0xf0f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setpipe(r1, 0x407, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e95000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tun(&(0x7f00002d2000)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00002d1000)=0xb) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @fr=&(0x7f0000013000-0x18)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r4 = socket(0x11, 0x80803, 0x0) setsockopt$sock_str(r2, 0x1, 0x19, &(0x7f0000bd0000)="73656c696e75787d766d6e6574316c6f74727573746564626465763a2e766d6e657431747275737465647b00", 0x2c) ptrace$setsig(0x4203, 0x0, 0x10000000000000, &(0x7f0000001000)={0xb, 0x2, 0x801, 0x100}) setsockopt(r4, 0x107, 0x1, &(0x7f0000001000)="", 0x200) close(r4) sysinfo(&(0x7f0000589000-0xac)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r5 = dup3(r3, r3, 0x0) open(&(0x7f0000c09000)="2e2f66696c653000", 0x2, 0x62) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000bdb000-0x10)={0x0, 0x6, 0x1, 0x0}, &(0x7f0000001000-0x4)=0x10) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000d06000)="72") ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000f0f000)={0x4, 0xffffffffffffffff, 0x1}) recvfrom$inet6(r5, &(0x7f0000300000-0x3b)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3b, 0x1, &(0x7f0000c8d000)={0xa, 0x1, 0x475e, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}, 0x1c) setsockopt$inet_tcp_int(r6, 0x6, 0xf, &(0x7f0000002000-0x4)=0xfff, 0x4) 2017/10/13 21:59:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000513000)={0x40000000ff}, 0x8, 0x80000) perf_event_open(&(0x7f000002f000-0x78)={0x2, 0x78, 0x44, 0x10000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000e14000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f000060e000-0x4)=0x10, 0x80000) syncfs(r0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000450000-0x4)=0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5f, &(0x7f0000002000-0x63)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0xc, 0x4, 0x0, 0xfffffffffffffffc, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @remote={0xac, 0x14, 0x0, 0xbb}, {[@timestamp={0x44, 0x10, 0x8, 0x1, 0x0, [{[], 0x0}, {[@empty=0x0], 0x8}]}, @generic={0x1, 0xb, "1e23dbc8019af77e2f"}]}}, @tcp={{0x1, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x17f, 0xffffffff}, @nop={0x1}]}}, {"d0"}}}}}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000f3b000-0x4)=0x0, &(0x7f0000653000-0x4)=0x4) mmap(&(0x7f0000000000/0xdca000)=nil, 0xdca000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dca000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x527000)=nil, 0x527000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000da7000)={[{0x8, 0x0, 0x2, 0x80, 0xfffffffffffffaa0, 0xfffffffffffffffc, 0x1000000000000000, 0x8, 0x4, 0x100000001, 0x0, 0xbf, 0x4}, {0x1, 0x3, 0xfffffffffffffffb, 0x8, 0x6, 0xb60, 0x5, 0x800, 0xffffffffffffff66, 0xffff, 0x7, 0x1e, 0x8001}, {0x9, 0x0, 0x3ff, 0xed3, 0x0, 0x50, 0xfffffffffffffffb, 0x7, 0x7, 0x100000000, 0x3, 0x200, 0x8176}], 0x7ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b75000)={0x9, 0x4, &(0x7f0000053000-0x20)=[@map={0x7c8f2d, 0x0, 0x2, r1}, @map={0x0, 0x80000001, 0x3, r1}, @generic={0x6, 0x8001, 0x6, 0x0}, @generic={0x7, 0x2, 0x0, 0x9}], &(0x7f0000144000)="e92d706f7369785f61636c5f616363657373766d6e65743100", 0x7, 0xb1, &(0x7f0000066000-0xb1)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x200, 0x1}, 0x30) getsockopt(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000521000)="", &(0x7f0000522000)=0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00009f1000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000894000-0xc4)=@ethtool_drvinfo={0x3, "02a28728caa75e04850094279589a679291d3ede490757f8c002e8d950a90fde", "1e9e3617e6133f945528dca97571a6158447a33499012036270c5690a2e32e92", "55e98c5067b47d333c815fb4c64a02ef55fa8ac7539d72c94c8161e349449646", "6313fa3ebbbcb45e501e8868be7d791ed644bdf3c9f13a03b71478beaa0aa2ed", "4bc57267c033a4f973de1fbdda4314d0d5d389fc88fc7115e0f9ef6880200000", "72dbd6392ed15bd8f6198b2b", 0x7ffffffd, 0x100, 0x6, 0xe3b, 0x40000040000a}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000742000)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000527000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f000094d000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/10/13 21:59:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000786000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00009c1000-0x424)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @broadcast=0xffffffff, {[]}}, @udp={0x0, 0x0, 0x8, 0x0, ""}}}}}) fchmod(0xffffffffffffffff, 0x0) mkdir(&(0x7f000002a000-0xa)="2e2f636f6e74726f6c00", 0x0) select(0x40, &(0x7f00007b6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000020b000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000003000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000023000-0x10)={0x77359400, 0x0}) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00001ce000-0x20)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, 0xff, 0x6, 0x2, 0xdceb, 0xffffffffffffffff}, 0x20) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f000074c000-0x5c)={{0xa, 0x3, 0x20, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100}, {0xa, 0x0, 0x8000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfffffffffffffffa}, 0x0, [0x0, 0xc1, 0x8, 0x9, 0x9, 0x9, 0x5, 0xd39b]}, 0x5c) r1 = gettid() sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00007b6000)=[{&(0x7f00007b7000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x9, "5dd15856d84e49044731b767c3e9e6cee840cd3a0d4eaa1a693728595618a91f7a7b70a6a89a12d00ccf0573f735695cdc3515a96086684b44ff2095004436", 0x0}, 0x60, &(0x7f00007b7000-0x60)=[], 0x0, &(0x7f00007b6000)={0x10, 0x0, 0x0, ""}, 0x10, 0x0}], 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000805000-0xc)={0x5, r0, 0x1}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000b46000-0x1)=0x0) fcntl$setown(r0, 0x8, r1) rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) clone(0x0, &(0x7f0000f12000-0xa4)="", &(0x7f000082c000-0x4)=0x0, &(0x7f00000ec000)=0x0, &(0x7f0000710000-0x91)="") fcntl$setsig(r0, 0xa, 0x20) io_getevents(0x0, 0x7f, 0x4, &(0x7f0000b96000-0x80)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f00005f2000-0x10)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0xf8e, 0x7, 0x0, 0x8b}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000d9e000-0x50)=[{&(0x7f0000f74000)="", 0x0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f00007a7000)="2e2f636f6e74726f6c00", 0xa4000960) open(&(0x7f00008e1000-0xa)="2e2f636f6e74726f6c00", 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00009b8000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000bc000)=@abs={0x0, 0x0, 0x1}, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a12000/0x18000)=nil, &(0x7f0000afa000)=[@textreal={0x8, &(0x7f00006d6000-0x44)="baf80c66b8f4f1598766efbafc0c66ed0fa2b80f008ed8ba4100b85c00ef362e0f23ac6565262e64643e0fc76e51ba4200ed672ec0b4fee54f0000b73666f40fc7ac0001", 0x44}], 0x1, 0x0, &(0x7f0000865000)=[], 0x0) 2017/10/13 21:59:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000588000-0x8)="2e2f66696c653000", 0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x104000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x1109, &(0x7f0000987000/0x1000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000a6e000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c4b000)=0xe8) getegid() r0 = syz_open_dev$usbmon(&(0x7f00007d5000-0xd)="2f6465762f7573626d6f6e2300", 0x2, 0x4000) r1 = accept4(0xffffffffffffff9c, &(0x7f000065b000-0x80)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000159000)=0x80, 0x80000) mmap(&(0x7f00008a9000/0x2000)=nil, 0x2000, 0x3, 0x32, r1, 0x3) r2 = perf_event_open(&(0x7f0000dce000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)="2e2f636f6e74726f6c00", 0x0) r3 = socket$inet(0x2, 0x8000000000000003, 0x2) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000925000-0xc)={@rand_addr=0x0, @empty=0x0, 0x0}, &(0x7f0000cbe000)=0xc) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000886000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, r4}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00003a0000-0x38)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x6, [@rand_addr=0x44, @loopback=0x7f000001, @rand_addr=0x6, @rand_addr=0x21, @loopback=0x7f000001, @broadcast=0xffffffff]}, 0x28) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000566000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, 0x0}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000919000-0x10)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x0, []}, 0x10) r5 = socket(0x2, 0x803, 0x3) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00004a5000)=0x0) r7 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdd, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x200000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x800) fstat(r2, &(0x7f0000a14000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa, 0x2000000000004c, 0x0}) ppoll(&(0x7f00004b9000)=[{r8, 0x1, 0x0}, {r5, 0x40000400, 0x0}, {r5, 0x1, 0x0}, {r5, 0x2400, 0x0}, {r5, 0xc000, 0x0}, {r8, 0x40, 0x0}], 0x6, &(0x7f0000922000)={0x0, 0x0}, &(0x7f0000923000-0x8)={0x8}, 0x8) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000d72000-0x20)={{&(0x7f0000ba3000/0x4000)=nil, 0x4000}, 0xffffffffffffffff, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000087b000-0x20)={{&(0x7f0000f41000/0x3000)=nil, 0x3000}, 0x3, 0x0}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000811000)=0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x668, 0x2, 0x0, 0x0, 0x0, 0x3, 0x3, 0x20001000, 0x8, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, r9, 0xffffffffffffffff, r7, 0x0) getsockopt$inet_buf(r5, 0x0, 0xfffffffffffffffe, &(0x7f000096d000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000478000)=0x1000) futex(&(0x7f0000001000)=0x4, 0x7, 0x2, &(0x7f0000191000)={0x0, 0x0}, &(0x7f000046d000)=0x0, 0x0) 2017/10/13 21:59:33 executing program 0: 2017/10/13 21:59:33 executing program 0: 2017/10/13 21:59:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000029000-0x10)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0xffffffff}]}) sync() clone(0x0, &(0x7f00000db000-0x3)="", &(0x7f0000a9e000-0x4)=0x0, &(0x7f0000441000)=0x0, &(0x7f0000664000)="") recvfrom$inet(0xffffffffffffffff, &(0x7f0000a6e000)="", 0x0, 0x40000000, 0x0, 0x0) syzkaller login: [ 36.147479] ================================================================== [ 36.154869] BUG: KASAN: use-after-free in __lock_acquire+0x407b/0x4620 [ 36.161498] Read of size 8 at addr ffff8801c9bcc9a8 by task syz-executor4/3242 [ 36.168818] [ 36.170413] CPU: 0 PID: 3242 Comm: syz-executor4 Not tainted 4.14.0-rc4-next-20171009+ #33 [ 36.178774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.188095] Call Trace: [ 36.190648] dump_stack+0x194/0x257 [ 36.194239] ? arch_local_irq_restore+0x53/0x53 [ 36.198879] ? show_regs_print_info+0x65/0x65 [ 36.203346] ? __kernel_text_address+0xd/0x40 [ 36.207807] ? __lock_acquire+0x407b/0x4620 [ 36.212099] print_address_description+0x73/0x250 [ 36.216915] ? __lock_acquire+0x407b/0x4620 [ 36.221199] kasan_report+0x25b/0x340 [ 36.224964] __asan_report_load8_noabort+0x14/0x20 [ 36.229859] __lock_acquire+0x407b/0x4620 [ 36.233974] ? unwind_dump+0x4c0/0x4c0 [ 36.237825] ? __unwind_start+0x169/0x330 [ 36.241938] ? __kernel_text_address+0xd/0x40 [ 36.246395] ? unwind_get_return_address+0x61/0xa0 [ 36.251291] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 36.256443] ? unwind_get_return_address+0x61/0xa0 [ 36.261337] ? __save_stack_trace+0x61/0xd0 [ 36.265623] ? do_signal+0x94/0x1ee0 [ 36.269299] ? save_stack_trace+0x1a/0x20 [ 36.273408] ? __lock_acquire+0x20fd/0x4620 [ 36.277695] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 36.282862] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 36.288030] ? save_stack_trace+0x1a/0x20 [ 36.292148] ? __lock_acquire+0x20fd/0x4620 [ 36.296435] ? osq_unlock+0x350/0x350 [ 36.300199] ? save_stack_trace+0x1a/0x20 [ 36.304308] ? lock_release+0xd70/0xd70 [ 36.308246] ? check_noncircular+0x20/0x20 [ 36.312445] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 36.317601] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 36.322757] ? find_held_lock+0x39/0x1d0 [ 36.326782] ? __perf_event_task_sched_out+0x268/0x1400 [ 36.332116] ? find_held_lock+0x39/0x1d0 [ 36.336141] ? lock_downgrade+0x990/0x990 [ 36.340252] ? check_noncircular+0x20/0x20 [ 36.344451] lock_acquire+0x1d5/0x580 [ 36.348216] ? exit_pi_state_list+0x369/0x7a0 [ 36.352683] ? lock_release+0xd70/0xd70 [ 36.356625] ? do_raw_spin_trylock+0x190/0x190 [ 36.361171] ? find_held_lock+0x39/0x1d0 [ 36.365199] _raw_spin_lock_irq+0x5e/0x80 [ 36.369311] ? exit_pi_state_list+0x369/0x7a0 [ 36.373771] exit_pi_state_list+0x369/0x7a0 [ 36.378064] ? futex_wait_requeue_pi.constprop.19+0x1300/0x1300 [ 36.384088] ? lock_release+0xd70/0xd70 [ 36.388031] ? check_same_owner+0x320/0x320 [ 36.392322] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 36.397395] ? __might_sleep+0x95/0x190 [ 36.401342] ? __might_fault+0x188/0x1d0 [ 36.405366] ? do_raw_spin_trylock+0x190/0x190 [ 36.409917] mm_release+0x46d/0x590 [ 36.413506] ? do_raw_spin_trylock+0x190/0x190 [ 36.418055] ? mm_access+0x140/0x140 [ 36.421732] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.426191] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 36.431171] ? trace_hardirqs_on+0xd/0x10 [ 36.435281] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.439743] ? acct_collect+0x637/0x800 [ 36.443681] do_exit+0x481/0x1b00 [ 36.447098] ? mm_update_next_owner+0x930/0x930 [ 36.451734] ? check_same_owner+0x320/0x320 [ 36.456024] ? futex_wait_setup+0x14a/0x3d0 [ 36.460317] ? __might_sleep+0x95/0x190 [ 36.464257] ? futex_wait_queue_me+0x524/0x7e0 [ 36.468804] ? refill_pi_state_cache.part.6+0x2f0/0x2f0 [ 36.474130] ? trace_sched_wake_idle_without_ipi+0x208/0x290 [ 36.479891] ? check_noncircular+0x20/0x20 [ 36.484089] ? futex_wait_setup+0x22e/0x3d0 [ 36.488375] ? futex_wake+0x680/0x680 [ 36.492140] ? find_held_lock+0x39/0x1d0 [ 36.496168] ? lock_downgrade+0x990/0x990 [ 36.500280] ? recalc_sigpending_tsk+0x117/0x150 [ 36.504999] ? recalc_sigpending+0x103/0x160 [ 36.509376] ? recalc_sigpending_tsk+0x150/0x150 [ 36.514095] ? get_signal+0x2b2/0x16d0 [ 36.517949] do_group_exit+0x149/0x400 [ 36.521804] ? __lock_is_held+0xbc/0x140 [ 36.525836] ? SyS_exit+0x30/0x30 [ 36.529252] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.533710] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 36.538688] get_signal+0x73f/0x16d0 [ 36.542367] ? ptrace_notify+0x130/0x130 [ 36.546396] ? exit_robust_list+0x240/0x240 [ 36.550682] ? wake_up_q+0x8a/0xe0 [ 36.554185] ? rwsem_wake+0x313/0x520 [ 36.557951] ? SyS_brk+0x6f0/0x6f0 [ 36.561456] do_signal+0x94/0x1ee0 [ 36.564963] ? arch_get_unmapped_area+0x750/0x750 [ 36.569774] ? lock_acquire+0x1d5/0x580 [ 36.573720] ? vm_mmap_pgoff+0x198/0x280 [ 36.577748] ? userfaultfd_unmap_complete+0x327/0x510 [ 36.582905] ? setup_sigcontext+0x7d0/0x7d0 [ 36.587189] ? userfaultfd_unmap_prep+0x540/0x540 [ 36.591997] ? call_rwsem_wake+0x1b/0x30 [ 36.596035] ? vma_compute_subtree_gap+0x200/0x200 [ 36.600936] ? up_write+0xd8/0x120 [ 36.604441] ? down_write+0x120/0x120 [ 36.608206] ? security_mmap_file+0x143/0x180 [ 36.612666] ? vm_mmap_pgoff+0x1fc/0x280 [ 36.616692] ? exit_to_usermode_loop+0x8c/0x310 [ 36.621327] exit_to_usermode_loop+0x214/0x310 [ 36.625871] ? vma_is_stack_for_current+0xa0/0xa0 [ 36.630676] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 36.636176] ? kasan_check_write+0x14/0x20 [ 36.640385] syscall_return_slowpath+0x42f/0x510 [ 36.645108] ? prepare_exit_to_usermode+0x2d0/0x2d0 [ 36.650090] ? entry_SYSCALL_64_fastpath+0x91/0xbe [ 36.654981] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 36.659961] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 36.664682] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 36.669400] RIP: 0033:0x4520a9 [ 36.672554] RSP: 002b:00007fb1e89fecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.680224] RAX: 0000000000000000 RBX: 00000000007180d8 RCX: 00000000004520a9 [ 36.687457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000007180d8 [ 36.694693] RBP: 00000000007180b0 R08: 0000000000000000 R09: 0000000000000000 [ 36.701930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.709186] R13: 0000000000a6f7ef R14: 00007fb1e89ff9c0 R15: 000000000000000a [ 36.716426] [ 36.718026] Allocated by task 3250: [ 36.721626] save_stack+0x43/0xd0 [ 36.725046] kasan_kmalloc+0xad/0xe0 [ 36.728723] kmem_cache_alloc_trace+0x136/0x750 [ 36.733357] refill_pi_state_cache.part.6+0xa5/0x2f0 [ 36.738423] futex_requeue+0x1887/0x2370 [ 36.742446] do_futex+0x7f5/0x20d0 [ 36.745948] SyS_futex+0x260/0x390 [ 36.749451] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 36.754168] [ 36.755763] Freed by task 3248: [ 36.759010] save_stack+0x43/0xd0 [ 36.762432] kasan_slab_free+0x71/0xc0 [ 36.766280] kfree+0xca/0x250 [ 36.769348] put_pi_state+0x3f4/0x560 [ 36.773113] unqueue_me_pi+0x4a/0xc0 [ 36.776791] futex_wait_requeue_pi.constprop.19+0xc7f/0x1300 [ 36.782553] do_futex+0x825/0x20d0 [ 36.786055] SyS_futex+0x260/0x390 [ 36.789561] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 36.794278] [ 36.795870] The buggy address belongs to the object at ffff8801c9bcc980 [ 36.795870] which belongs to the cache kmalloc-256 of size 256 [ 36.808494] The buggy address is located 40 bytes inside of [ 36.808494] 256-byte region [ffff8801c9bcc980, ffff8801c9bcca80) [ 36.820246] The buggy address belongs to the page: [ 36.825141] page:ffffea000726f300 count:1 mapcount:0 mapping:ffff8801c9bcc0c0 index:0x0 [ 36.833247] flags: 0x200000000000100(slab) [ 36.837447] raw: 0200000000000100 ffff8801c9bcc0c0 0000000000000000 000000010000000c [ 36.845292] raw: ffffea00072538a0 ffffea000726f460 ffff8801dac007c0 0000000000000000 [ 36.853133] page dumped because: kasan: bad access detected [ 36.858804] [ 36.860394] Memory state around the buggy address: [ 36.865286] ffff8801c9bcc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.872610] ffff8801c9bcc900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 36.879932] >ffff8801c9bcc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.887256] ^ [ 36.891891] ffff8801c9bcca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.899212] ffff8801c9bcca80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 36.906531] ================================================================== [ 36.913850] Disabling lock debugging due to kernel taint [ 36.919260] Kernel panic - not syncing: panic_on_warn set ... [ 36.919260] [ 36.926585] CPU: 0 PID: 3242 Comm: syz-executor4 Tainted: G B 4.14.0-rc4-next-20171009+ #33 [ 36.936251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.945566] Call Trace: [ 36.948120] dump_stack+0x194/0x257 [ 36.951709] ? arch_local_irq_restore+0x53/0x53 [ 36.956341] ? vprintk_default+0x28/0x30 [ 36.960367] ? __lock_acquire+0x3f80/0x4620 [ 36.964656] panic+0x1e4/0x41c [ 36.967810] ? refcount_error_report+0x214/0x214 [ 36.972530] ? __lock_acquire+0x407b/0x4620 [ 36.976815] kasan_end_report+0x50/0x50 [ 36.980752] kasan_report+0x144/0x340 [ 36.984516] __asan_report_load8_noabort+0x14/0x20 [ 36.989406] __lock_acquire+0x407b/0x4620 [ 36.993520] ? unwind_dump+0x4c0/0x4c0 [ 36.997369] ? __unwind_start+0x169/0x330 [ 37.001480] ? __kernel_text_address+0xd/0x40 [ 37.005940] ? unwind_get_return_address+0x61/0xa0 [ 37.010834] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 37.015986] ? unwind_get_return_address+0x61/0xa0 [ 37.020878] ? __save_stack_trace+0x61/0xd0 [ 37.025167] ? do_signal+0x94/0x1ee0 [ 37.028847] ? save_stack_trace+0x1a/0x20 [ 37.032956] ? __lock_acquire+0x20fd/0x4620 [ 37.037240] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 37.042393] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 37.047547] ? save_stack_trace+0x1a/0x20 [ 37.051658] ? __lock_acquire+0x20fd/0x4620 [ 37.055944] ? osq_unlock+0x350/0x350 [ 37.059707] ? save_stack_trace+0x1a/0x20 [ 37.063818] ? lock_release+0xd70/0xd70 [ 37.067758] ? check_noncircular+0x20/0x20 [ 37.071955] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 37.077109] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 37.082260] ? find_held_lock+0x39/0x1d0 [ 37.086286] ? __perf_event_task_sched_out+0x268/0x1400 [ 37.091618] ? find_held_lock+0x39/0x1d0 [ 37.095646] ? lock_downgrade+0x990/0x990 [ 37.099758] ? check_noncircular+0x20/0x20 [ 37.103958] lock_acquire+0x1d5/0x580 [ 37.107731] ? exit_pi_state_list+0x369/0x7a0 [ 37.112189] ? lock_release+0xd70/0xd70 [ 37.116128] ? do_raw_spin_trylock+0x190/0x190 [ 37.120670] ? find_held_lock+0x39/0x1d0 [ 37.124699] _raw_spin_lock_irq+0x5e/0x80 [ 37.128810] ? exit_pi_state_list+0x369/0x7a0 [ 37.133267] exit_pi_state_list+0x369/0x7a0 [ 37.137555] ? futex_wait_requeue_pi.constprop.19+0x1300/0x1300 [ 37.143577] ? lock_release+0xd70/0xd70 [ 37.147517] ? check_same_owner+0x320/0x320 [ 37.151802] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 37.156868] ? __might_sleep+0x95/0x190 [ 37.160806] ? __might_fault+0x188/0x1d0 [ 37.164831] ? do_raw_spin_trylock+0x190/0x190 [ 37.169375] mm_release+0x46d/0x590 [ 37.172964] ? do_raw_spin_trylock+0x190/0x190 [ 37.177512] ? mm_access+0x140/0x140 [ 37.181187] ? _raw_spin_unlock_irq+0x27/0x70 [ 37.185647] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 37.190627] ? trace_hardirqs_on+0xd/0x10 [ 37.194738] ? _raw_spin_unlock_irq+0x27/0x70 [ 37.199197] ? acct_collect+0x637/0x800 [ 37.203137] do_exit+0x481/0x1b00 [ 37.206555] ? mm_update_next_owner+0x930/0x930 [ 37.211189] ? check_same_owner+0x320/0x320 [ 37.215476] ? futex_wait_setup+0x14a/0x3d0 [ 37.219766] ? __might_sleep+0x95/0x190 [ 37.223707] ? futex_wait_queue_me+0x524/0x7e0 [ 37.228256] ? refill_pi_state_cache.part.6+0x2f0/0x2f0 [ 37.233585] ? trace_sched_wake_idle_without_ipi+0x208/0x290 [ 37.239347] ? check_noncircular+0x20/0x20 [ 37.243545] ? futex_wait_setup+0x22e/0x3d0 [ 37.247832] ? futex_wake+0x680/0x680 [ 37.251596] ? find_held_lock+0x39/0x1d0 [ 37.255621] ? lock_downgrade+0x990/0x990 [ 37.259734] ? recalc_sigpending_tsk+0x117/0x150 [ 37.264453] ? recalc_sigpending+0x103/0x160 [ 37.268826] ? recalc_sigpending_tsk+0x150/0x150 [ 37.273544] ? get_signal+0x2b2/0x16d0 [ 37.277398] do_group_exit+0x149/0x400 [ 37.281249] ? __lock_is_held+0xbc/0x140 [ 37.285273] ? SyS_exit+0x30/0x30 [ 37.288688] ? _raw_spin_unlock_irq+0x27/0x70 [ 37.293145] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 37.298125] get_signal+0x73f/0x16d0 [ 37.301803] ? ptrace_notify+0x130/0x130 [ 37.305829] ? exit_robust_list+0x240/0x240 [ 37.310113] ? wake_up_q+0x8a/0xe0 [ 37.313617] ? rwsem_wake+0x313/0x520 [ 37.317380] ? SyS_brk+0x6f0/0x6f0 [ 37.320884] do_signal+0x94/0x1ee0 [ 37.324386] ? arch_get_unmapped_area+0x750/0x750 [ 37.329189] ? lock_acquire+0x1d5/0x580 [ 37.333125] ? vm_mmap_pgoff+0x198/0x280 [ 37.337150] ? userfaultfd_unmap_complete+0x327/0x510 [ 37.342304] ? setup_sigcontext+0x7d0/0x7d0 [ 37.346588] ? userfaultfd_unmap_prep+0x540/0x540 [ 37.351393] ? call_rwsem_wake+0x1b/0x30 [ 37.355417] ? vma_compute_subtree_gap+0x200/0x200 [ 37.360312] ? up_write+0xd8/0x120 [ 37.363814] ? down_write+0x120/0x120 [ 37.367577] ? security_mmap_file+0x143/0x180 [ 37.372039] ? vm_mmap_pgoff+0x1fc/0x280 [ 37.376063] ? exit_to_usermode_loop+0x8c/0x310 [ 37.380696] exit_to_usermode_loop+0x214/0x310 [ 37.385243] ? vma_is_stack_for_current+0xa0/0xa0 [ 37.390049] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 37.395548] ? kasan_check_write+0x14/0x20 [ 37.399749] syscall_return_slowpath+0x42f/0x510 [ 37.404468] ? prepare_exit_to_usermode+0x2d0/0x2d0 [ 37.409450] ? entry_SYSCALL_64_fastpath+0x91/0xbe [ 37.414342] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 37.419321] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 37.424045] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 37.428763] RIP: 0033:0x4520a9 [ 37.431916] RSP: 002b:00007fb1e89fecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.439585] RAX: 0000000000000000 RBX: 00000000007180d8 RCX: 00000000004520a9 [ 37.446816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000007180d8 [ 37.454051] RBP: 00000000007180b0 R08: 0000000000000000 R09: 0000000000000000 [ 37.461285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.468519] R13: 0000000000a6f7ef R14: 00007fb1e89ff9c0 R15: 000000000000000a [ 37.476146] Dumping ftrace buffer: [ 37.479652] (ftrace buffer empty) [ 37.483325] Kernel Offset: disabled [ 37.486913] Rebooting in 86400 seconds..