INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-3,10.128.15.202' (ECDSA) to the list of known hosts. 2017/11/29 03:28:42 fuzzer started 2017/11/29 03:28:42 dialing manager at 10.128.0.26:32923 2017/11/29 03:28:47 kcov=true, comps=true 2017/11/29 03:28:47 executing program 0: mmap(&(0x7f0000000000/0xdee000)=nil, 0xdee000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) sendto$inet6(r0, &(0x7f0000bdd000-0x1)="3f", 0x1, 0x0, &(0x7f0000273000)={0xa, 0x1, 0x7, @loopback={0x0, 0x1}, 0x9}, 0x1c) mmap(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dee000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000def000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x10, &(0x7f0000def000)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000dee000)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000005e000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000b2e000)={@loopback={0x0, 0x1}, r2}, 0x14) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000bc3000-0xf)="2f6465762f73657175656e63657200", 0x800000000210000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000001000-0x30)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001000000000fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x4000000005, 0x80000000803, 0x29) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00003f8000)={0x2, &(0x7f0000f82000-0x8)=[{0x48, 0x0, 0x0, 0x7fffffff}, {0x202000006, 0x0, 0x0, 0x5}]}, 0x10) socket(0xa, 0x3, 0x21) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) recvfrom$llc(r4, &(0x7f00001d3000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x7e, 0x40002002, &(0x7f0000312000-0x10)={0x1a, 0x0, 0x3, 0x8, 0x0, 0x8000, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x24, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2017/11/29 03:28:47 executing program 7: accept4$inet(0xffffffffffffffff, &(0x7f00009cd000-0x10)={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000c79000-0x4)=0x10, 0x800) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_str(r0, 0x1, 0x19, &(0x7f0000e22000-0x10)="2965746831406367726f7570656d3000", 0x10) r1 = perf_event_open(&(0x7f000000a000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000000000/0xfb0000)=nil, 0xfb0000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e54000/0x4000)=nil, 0x4000, 0x3, 0x10, r2, 0x0) mmap(&(0x7f0000952000/0x2000)=nil, 0x2000, 0x4000005, 0x32, r0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000449000)="2f6465762f72746300", 0xfffffffffffffff8, 0x0) socket$nfc_llcp(0x27, 0x400000000000003, 0x1) rt_sigaction(0x9, &(0x7f0000001000-0x20)={0x9, {0xffff}, 0x80000001, 0x400}, &(0x7f0000f4b000-0x20)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f000065a000-0x8)={0x0}) r4 = perf_event_open(&(0x7f0000711000-0x78)={0x2, 0x78, 0x55, 0x2, 0x3, 0x200000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffff800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfc00000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$netrom(0xffffffffffffffff, &(0x7f0000b11000-0x48)=@full={{0x6, {"85a0a0513e810a"}, 0x0}, [{"69ce91fe21e0ee"}, {"b709c36c1e16e4"}, {"32a96171496573"}, {"2ae83a62c90848"}, {"21fc1762d5c085"}, {"9e9b02c3d84438"}, {"beff6afd9f7c60"}, {"88401a990011f3"}]}, 0x48) r5 = syz_open_dev$sndseq(&(0x7f0000660000)="2f6465762f736e642f73657100", 0x0, 0x4400) r6 = perf_event_open(&(0x7f0000001000-0x78)={0x1, 0x78, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x668, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00001c9000)="", 0x0}], 0x1, &(0x7f0000001000-0x30)=[], 0x0, 0x0) mmap(&(0x7f0000a19000/0x2000)=nil, 0x2000, 0x0, 0x8010, r4, 0x2a) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fb0000)="2f6465762f6b766d00", 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f00002fd000/0x18000)=nil, &(0x7f0000e32000-0x18)=[@textreal={0x8, &(0x7f0000fb2000-0x76)="baf80c66b8317f1e8666efbafc0cb005ee67d14d000f01cb650f3801bfcbff66b9800000c00f326635004000000f3066b9800000c00f326635002000000f300f20e06635000001000f22e00f0766b8040000000f23d80f21f86635c00000100f23f866b98a01000066b83600000066ba000000000f30", 0x76}], 0x1, 0x0, &(0x7f0000ade000)=[], 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000301000-0x4)=0x74ab262b94010f67) mmap(&(0x7f000096f000/0x2000)=nil, 0x2000, 0x100103, 0x3f, r6, 0x400) mmap(&(0x7f0000aed000/0x1000)=nil, 0x1000, 0x10000000000003, 0x8010, r0, 0x1) mmap(&(0x7f000039e000/0x1000)=nil, 0x1000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x1000000, 0x20000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008c1000/0x2000)=nil, 0x2000, 0x4, 0x8832, 0xffffffffffffffff, 0xfffffffdfffffffc) mmap(&(0x7f0000fb2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fb3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000079f000/0x18000)=nil, &(0x7f000007f000)=[@textreal={0x8, &(0x7f0000000000)="66b8007000000f23d80f21f86635000000f00f23f82e0f01b30080d3b708000f01ca3ef20f79fe0fc4d8130f00912e1966b9800000c00f326635000800000f3066b99609000066b8cc00000066ba000000000f300f01df", 0x57}], 0x1, 0x42, &(0x7f0000c7b000)=[], 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) dup2(0xffffffffffffffff, r5) 2017/11/29 03:28:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000a000-0x4)=0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000fa2000)="6e7300") mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) exit(0x100000000) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00007bc000-0x4d)={0x49, "8d0f9adc7ecbc92285332d798aab52f7bac10e89f04129e14083809abb147007007f511f7f67851cf967c1780bccefe8ce8544823e5670c440d061f28874ecd25f41239744dce623de"}) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x406, r0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000012000)="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", 0x1000) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000015000-0xc)="2f6465762f6175746f667300", 0x515080, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknodat(r2, &(0x7f0000ac4000)="2e2f66696c653000", 0x20000014, 0x23) 2017/11/29 03:28:47 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x3b, &(0x7f000000e000-0x108)={0x0, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000497000-0x4)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000f23000)="", 0x0, 0x0, &(0x7f0000e72000)={0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000a5000-0x4)=0x0, &(0x7f0000c1e000-0x4)=0x4) sendto$inet6(r0, &(0x7f00008a8000-0x1000)="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", 0x5c1, 0x0, &(0x7f0000083000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c) recvfrom$inet6(r0, &(0x7f00005b6000)="", 0x0, 0x0, &(0x7f000034f000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000082c000-0x20)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0}, 0x20) rt_sigpending(&(0x7f0000ddd000-0x8)={0x0}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x10000031, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x540f, &(0x7f0000279000)=0x0) move_pages(r2, 0x1, &(0x7f0000001000-0x20)=[&(0x7f0000f57000/0x3000)=nil], 0x0, &(0x7f000000b000)=[], 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) munmap(&(0x7f00000a2000/0x1000)=nil, 0x1000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000a2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrlimit(0x12, &(0x7f00000a3000-0x10)={0x0, 0x0}) madvise(&(0x7f000000a000/0x4000)=nil, 0x4000, 0xb) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00006e9000/0x1000)=nil, 0x1000, 0x2000009, r3) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f00003d9000)={0x42424242, 0x42424242}, 0x2, 0x100000000000002) 2017/11/29 03:28:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000992000)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000da7000-0x8)={0x0, 0x7}, &(0x7f0000e04000)=0x8) getsockname(r0, &(0x7f0000cb0000)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c6d000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000eca000-0x8)={r1, 0xfffffffffffffffc}, &(0x7f0000697000)=0x8) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40000000000, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008f7000)={0x2002, 0x78, 0x73d4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00006bc000)="2f6465762f7667615f6172626974657200", 0x400, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000081000-0x14)={0x0, 0x6, 0x7fffffff, 0xfc, 0x15, 0x9}, &(0x7f0000e3b000-0x4)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000260000)={r4, 0x8}, &(0x7f00007cc000-0x4)=0x8) mmap(&(0x7f0000000000/0xafa000)=nil, 0xafa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000005000-0x9)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd67000)=nil, 0xd67000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000d67000-0x25)="24000000430001001200000000000000022b00040d00010020050000200000001d00000e", 0x24) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000741000-0xa)="2f6465762f70746d7800", 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f000001d000)=0x4) pipe2(&(0x7f0000015000+0x2c5)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x200, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000012000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x4, &(0x7f0000012000)={0x0, 0x5, 0x4, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000001e000-0x4)=0x0) timer_delete(r8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000314000-0x10)={r4, 0x769, 0x5, 0x20}, 0x10) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f000050f000)={0x0, 0x3cca}) 2017/11/29 03:28:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000412000-0x4)=0xf0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00006f5000)="2f6465762f6877726e6700", 0x100, 0x0) fcntl$setlease(r0, 0x400, 0x3) r2 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sndtimer(&(0x7f0000974000)="2f6465762f736e642f74696d657200", 0x0, 0x800) lstat(&(0x7f0000ca3000)="2e2f66696c653000", &(0x7f0000590000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x1000000000003, r3) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f00008cc000)=0x100d62) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x2, 0x0, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$urandom(&(0x7f0000db1000)="2f6465762f7572616e646f6d00", 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000c02000-0x18)=@add_del={0x2, &(0x7f000041a000)=@common="79616d30000000000000000000000000", 0x648}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000dde000-0x10)=[@in={0x2, 0x0, @rand_addr=0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x1) syz_open_dev$random(&(0x7f0000caa000-0xc)="2f6465762f72616e646f6d00", 0x0, 0x2000) bind$bt_rfcomm(r1, &(0x7f00002cd000)={0x1f, {0xcd37, 0x1c, 0x5, 0x4, 0x3, 0x2}, 0x3d}, 0x9) r5 = fcntl$getown(r4, 0x9) migrate_pages(r5, 0x7, &(0x7f00001bd000)=0x2000000040, &(0x7f000047a000-0x8)=0x8) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000467000)={0x77359400, 0x0}, 0x10) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00002e6000-0x58)={0x2, 0x0, [{0x80000008, 0x1ff, 0x5, 0x5, 0x4, 0x4, 0xffffffff, [0x0, 0x0, 0x0]}, {0x8000000a, 0x3, 0x1, 0x80000001, 0xd09, 0x7, 0x51fe, [0x0, 0x0, 0x0]}]}) ioctl$int_in(r4, 0x5452, &(0x7f0000309000-0x8)=0x80000005) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000aa5000-0xc)={0x0, 0x0, 0x0}, 0xc) ptrace$pokeuser(0x6, r6, 0x9, 0x3) r7 = syz_open_dev$random(&(0x7f0000338000-0xc)="2f6465762f72616e646f6d00", 0x0, 0x20) ioctl$int_in(r7, 0x5452, &(0x7f0000caa000-0x8)=0xffffffffffff8001) socket$netlink(0x10, 0x3, 0xc) close(r4) 2017/11/29 03:28:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x4800, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00008ba000+0xf6b)={0x0, 0x4, 0xff, 0xfff7fffffffffff7}, &(0x7f0000001000-0x4)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002000-0x10)={0x10000, 0x4, 0x3, 0x5, r1}, &(0x7f0000001000-0x4)=0x10) ioctl$EVIOCGLED(r0, 0xc0046d00, &(0x7f000061c000)="") r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet(r3, &(0x7f0000e37000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000d0e000-0x2)=0xfffffffffffffff9, &(0x7f0000654000-0x8)=0x2) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000bb6000)={0x7, 0x800000}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000b30000)={0x0, 0xb570}, &(0x7f0000ba8000)=0x8) r4 = perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0x3ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f000035e000-0xf)="637075262decfffefffff100040022") 2017/11/29 03:28:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x10000, 0x200000000000) mmap(&(0x7f0000efb000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r0, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bb1000/0x4000)=nil, 0x4000, 0x1, 0x32, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000bb1000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000002000-0x4)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00004b4000-0x10)={r2, 0x1, 0x5, 0x8}, &(0x7f000031d000-0x4)=0x10) perf_event_open(&(0x7f000001d000)={0xffffffffffffffff, 0x78, 0xde, 0x0, 0x3de, 0x5, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001af000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_INTERRUPT(0xffffffffffffffff, 0x4010ae94, &(0x7f0000bb1000)={0xc000, 0x6, 0x5}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x40033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = getpgrp(r1) setpriority(0x0, r3, 0x85) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00004fc000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000aad000/0x18000)=nil, &(0x7f0000427000)=[@text16={0x10, &(0x7f00006b4000-0x45)="66b9800000c00f326635010000000f300f01d966b9980100000f32f080500907c10a3a0f21e1ead200b100baf80c66b83495a58d66efbafc0cd9cf660f51bd8091660f0132", 0x45}], 0x1, 0x2, &(0x7f0000573000)=[@dstype3={0x7, 0xe}, @cstype3={0x5, 0xd}], 0x2) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4068aea3, &(0x7f0000563000)={0x7f, 0x0, [0x80000, 0x3, 0x4, 0x3f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$loop(&(0x7f0000e5e000-0xb)="2f6465762f6c6f6f702300", 0x8, 0x4000) mmap(&(0x7f000001a000/0x4000)=nil, 0x4000, 0x2000008, 0x50, r7, 0x0) getresuid(&(0x7f000028f000)=0x0, &(0x7f000001a000)=0x0, &(0x7f00000d8000)=0x0) close(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000c1d000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0], 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d65000)="2f6465762f73657175656e6365723200", 0x0, 0x0) syzkaller login: [ 35.850421] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 35.881587] BUG: unable to handle kernel paging request at fffffffffffffff8 [ 35.888718] IP: copy_user_handle_tail+0x31/0x80 [ 35.893355] PGD 5e28067 P4D 5e28067 PUD 5e2a067 PMD 0 [ 35.898613] Oops: 0002 [#1] SMP KASAN [ 35.902382] Dumping ftrace buffer: [ 35.905888] (ftrace buffer empty) [ 35.909566] Modules linked in: [ 35.912736] CPU: 1 PID: 3318 Comm: syz-executor7 Not tainted 4.15.0-rc1-mm1+ #28 [ 35.920232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.929554] task: ffff8801c49b00c0 task.stack: ffff8801c4a98000 [ 35.935585] RIP: 0010:copy_user_handle_tail+0x31/0x80 [ 35.940740] RSP: 0018:ffff8801c4a9fac0 EFLAGS: 00010246 [ 35.946071] RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff851520f5 [ 35.953310] RDX: 0000000000000087 RSI: ffffc900017c6000 RDI: ffff8801c4a9fd80 [ 35.960545] RBP: ffff8801c4a9fae8 R08: 00000000201c9000 R09: ffffed0038953fb2 [ 35.967784] R10: 0000000000000002 R11: ffffed0038953fb1 R12: 0000000000000010 [ 35.975023] R13: ffff8801c4a9fd80 R14: 0000000020000001 R15: 0000000020000000 [ 35.982262] FS: 00007f3d77154700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 35.990455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.996307] CR2: fffffffffffffff8 CR3: 00000001c4f34000 CR4: 00000000001426e0 [ 36.003546] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.010782] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 00000000000b0602 [ 36.018019] Call Trace: [ 36.020582] _copy_from_user+0xc5/0x110 [ 36.024530] rw_copy_check_uvector+0x81/0x280 [ 36.029000] import_iovec+0xc8/0x430 [ 36.032688] ? dup_iter+0x260/0x260 [ 36.036281] ? task_work_run+0xa5/0x270 [ 36.040227] ? mntput+0x66/0x90 [ 36.043482] process_vm_rw+0x166/0x330 [ 36.047344] ? process_vm_rw_core.isra.1+0xbe0/0xbe0 [ 36.052418] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 36.057403] ? trace_hardirqs_on+0xd/0x10 [ 36.061518] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.065984] ? task_work_run+0x1f4/0x270 [ 36.070019] ? task_work_cancel+0x210/0x210 [ 36.074311] ? exit_to_usermode_loop+0x8c/0x310 [ 36.078955] ? trace_hardirqs_off+0xd/0x10 [ 36.083155] ? exit_to_usermode_loop+0x198/0x310 [ 36.087881] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 36.093386] ? kmem_cache_free+0x249/0x280 [ 36.097594] ? SyS_futex+0x269/0x390 [ 36.101279] ? do_futex+0x2280/0x2280 [ 36.105052] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 36.109868] SyS_process_vm_writev+0x42/0x50 [ 36.114244] ? SyS_process_vm_writev+0x42/0x50 [ 36.119135] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 36.123858] RIP: 0033:0x4529d9 [ 36.127015] RSP: 002b:00007f3d77153c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000137 [ 36.134691] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 00000000004529d9 [ 36.141928] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000000 [ 36.149167] RBP: 00000000000005a2 R08: 0000000000000000 R09: 0000000000000000 [ 36.156406] R10: 0000000020000fd0 R11: 0000000000000212 R12: 00000000006f57d0 [ 36.163641] R13: 00000000ffffffff R14: 00007f3d771546d4 R15: 0000000000000000 [ 36.170896] Code: 41 56 41 55 41 54 41 89 d4 53 49 89 fd 49 89 f7 e8 c5 0a 5b fc 45 85 e4 74 3d e8 bb 0a 5b fc 0f 1f 00 31 db 4d 8d 77 01 45 8a 3f <0f> 1f 00 85 db 75 2a e8 a3 0a 5b fc 0f 1f 00 45 88 7d 00 0f 1f [ 36.190028] RIP: copy_user_handle_tail+0x31/0x80 RSP: ffff8801c4a9fac0 [ 36.196656] CR2: fffffffffffffff8 [ 36.200079] ---[ end trace cffb8d61472b5174 ]--- [ 36.204801] Kernel panic - not syncing: Fatal exception [ 36.210164] Dumping ftrace buffer: [ 36.213672] (ftrace buffer empty) [ 36.217349] Kernel Offset: disabled [ 36.220944] Rebooting in 86400 seconds..