INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-8,10.128.0.9' (ECDSA) to the list of known hosts. 2017/12/03 23:59:30 fuzzer started 2017/12/03 23:59:30 dialing manager at 10.128.0.26:36255 2017/12/03 23:59:38 kcov=true, comps=true 2017/12/03 23:59:38 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000d8d000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000bf7000-0x7)="6664696e666f00") ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000cc0000)={0x8001, 0x7}) r2 = syz_open_procfs(0x0, &(0x7f0000704000)="6e65742f69676d7000") getdents64(r2, &(0x7f0000001000-0xff)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb8) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4436, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000e7000-0x9)="2f6465762f73672300", 0x3f, 0x2000) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000ea3000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000c23000)=0x10, 0x80000) r3 = syz_open_dev$loop(&(0x7f0000d0c000-0xb)="2f6465762f6c6f6f702300", 0x645, 0x44042) sendfile(r3, r3, &(0x7f00000de000-0x8)=0x0, 0x100000001) 2017/12/03 23:59:38 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00004ee000-0x1)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b88000)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00001ed000)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000aad000/0x18000)=nil, &(0x7f0000574000)=[@text32={0x20, &(0x7f00006bf000)="b935010040a0a0b847100000001622d022d00000000f3052c76dfef3ab66b86f00d9bcd1e0e0ea0000f67ab2b2f6e02ec1e8050f3235001000000f01dffc66e955e9550f2924f80f20d835080000000f22d8650f070f01b102000000", 0x5c}], 0x1, 0x0, &(0x7f00003c1000-0x10)=[@cr0={0x0, 0x50021}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2017/12/03 23:59:38 executing program 7: mmap(&(0x7f0000000000/0xef3000)=nil, 0xef3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00004b3000-0x98)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x98) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x40000000000a, &(0x7f0000605000)=0x7ff, 0x4) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f000075f000)=[{r1, 0x408, 0x0}, {r1, 0x0, 0x0}, {r1, 0x109, 0x0}, {r1, 0x4400, 0x0}, {r1, 0xffffffffffffffff, 0x0}, {r1, 0x21, 0x0}, {r1, 0x40000000008, 0x0}], 0x7, &(0x7f00007e2000-0x10)={0x77359400, 0x0}, &(0x7f00001a9000-0x8)={0x4}, 0x8) r2 = openat(0xffffffffffffffff, &(0x7f0000052000)="2e2f66696c653000", 0x402201, 0x2) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000dac000-0x4)=0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000fbb000)={0x232dff2, {{0xa, 0x2, 0x101, @loopback={0x0, 0x1}, 0x204}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x3, [{{0xa, 0x2, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x3, @loopback={0x0, 0x1}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x210) getsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f000091b000)=0x0, &(0x7f0000ab2000)=0x4) r3 = msgget$private(0x0, 0x23) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000b72000-0x10)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00008bb000)=0x9) msgctl$IPC_RMID(r3, 0x0) r4 = accept$inet(r0, &(0x7f0000fb3000)={0x0, 0x0, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00007f6000)=0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000a9c000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00005c3000-0x4)=0xe8) r6 = syz_open_dev$vcsa(&(0x7f0000e28000)="2f6465762f766373612300", 0x6, 0x20a800) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000326000)={@common="00000000000000000000000000000000", @ifru_names=@syzn={0x0, 0x0, 0x0, 0x0, 0x0}}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00003d6000)=0x0, &(0x7f0000cfc000-0x8)=0x1) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000d3d000-0xc)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, r5}, 0xc) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000472000)=0x9, &(0x7f00003e8000-0x4)=0x4) recvfrom(0xffffffffffffffff, &(0x7f0000fb9000-0x67)="", 0x0, 0x0, &(0x7f0000fba000)=@generic={0x0, "4e22b2ed856a305413b909f3b531ca91e05f80d45fd0ed9a64d5e6437b045731f4cc37d507bda32aa54b7ba24b68bd8010b1d7bd027376d5cac4e74c0731268e71e5985912d09b23d8d00c652fa131ebe7537e6b33d1f6023b507937d727c6e0b49a5db8bc5f8fa5e94cd2b956444862df613b32dc67b13f1607ac7ba4b2"}, 0x80) sendto$inet6(r1, &(0x7f0000353000-0x1000)="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", 0x7f7, 0x840, &(0x7f0000156000-0x1c)={0xa, 0x1, 0x1, @loopback={0x0, 0x1}, 0x8}, 0x1c) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000c3c000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f00005cf000)=0x8) r7 = syz_open_dev$loop(&(0x7f0000912000)="2f6465762f6c6f6f702300", 0x0, 0x4000014d202) ioctl$LOOP_SET_DIRECT_IO(r7, 0x40081271, 0x4) dup3(r7, r1, 0x80000) 2017/12/03 23:59:38 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000ea3000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000c23000)=0x10, 0x80000) r0 = syz_open_dev$loop(&(0x7f0000d0c000-0xb)="2f6465762f6c6f6f702300", 0x645, 0x44042) sendfile(r0, r0, &(0x7f00000de000-0x8)=0x0, 0x100000001) 2017/12/03 23:59:38 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) uname(&(0x7f0000e18000)="") rt_sigprocmask(0x0, &(0x7f0000ea4000-0x8)={0xfffffffffffffffa}, 0x0, 0x8) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000f13000-0x28)={&(0x7f0000218000)=@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f00005e5000)=[{&(0x7f0000409000-0x14)="a75042fc13c4703ee855acb583d0fdac504e3600", 0x14}, {&(0x7f0000a82000)="0073a1155aa496dbcf9dbfe624a1ee9351c3f97d965f8c1ee74430240946828b9ad9be49398c4d770df6a1186b401a08e11ff7f49a0139591295f749eb682acffd10814c9048df025ecd593f3501fc44c4e0fc73149f5e25167d76e2682d5f9bea891d8ee6bd67aa62ab550a23c6ffdd4a50e895ea90607a2bba7bf0fc1879a6d2979e666e82b311", 0x88}, {&(0x7f0000191000)="aaefe6cd54fce8cc7db1d4bc01dfdb742d385608fbec2426f1f8", 0x1a}, {&(0x7f00000a6000-0xe0)="1645d6744f7fec3480100480b579fb77fa35dd97cd2af10afd6455279922cf4342c2d3dfd0f8f88dc98fa1ebb815a0dceb85d0cb0bf7b61cc3f75da455262b7527c297d66b7bbece3c7ea25a9227a45a0632ee392ee57188fbe84c59b757c917f6f7507cde927acb0b5c1b3bef8ddbbe9cfddfae4d7ff1117e5c526e0267c87282fb0df0e024d1850ae52a1b320cef7b61779cb3dc8c575387e4dac88dcb98c8dbebb874c5c5b1db0afa15350494d018bac49d0cd748af57f287f2408967433c9e852ad88293fb26c1c9d538ccaccc51251e9ac4a9b110cbdc9aea8d396cac36", 0xe0}, {&(0x7f0000946000)="2c36e1f7dd966479ff5d415381e3c18dba0e0999e627f9b05a6efa9f09209e347d918690ffd04ebc5eda2b9faa1471c20f3a8a833457a222e766a42ef0aa8ade0af68ebd905b698780f14a97bd7047f05dbb5e4e2f1858e3695cec81f066e1a682c87a50b2224c594cee2e5360d28ee00b2431331e2465d2383a8248fa65fa79789d9e88c81ee67cebc395e82802822a20881a9f12887791fa55fbefbe4ba13dacc15f82384610810bade0d89e5ae61aa1eb9ab1366d1846d15fba49cc4868", 0xbf}], 0x5, &(0x7f0000f13000)=[{0x10, 0x0, 0x7, ""}], 0x10, 0x1000c0}, 0x810) pipe(&(0x7f0000033000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000029000)="90", 0x1) splice(r3, 0x0, r0, 0x0, 0x8526, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000127000)="2f6465762f72666b696c6c00", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e6, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$getreaper(0x1b, &(0x7f0000fa7000-0x8)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000235000-0x8)={0x0, 0x0}) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x80000da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1a, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfd2, 0x0, 0x0}, r5, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd9, 0x3, 0x0, 0x8000000000000000, 0x0, 0x3, 0x40100, 0xfffffffffffffffd, 0x102, 0x42c5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x81, 0x0}, r5, 0x5, r6, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) 2017/12/03 23:59:38 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000be5000-0x4)=0x0) r1 = syz_open_procfs(r0, &(0x7f000096a000-0x12)="6e65742f6970365f666c6f776c6162656c00") sendmmsg$inet_sctp(r1, &(0x7f0000cf1000-0x38)=[], 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe9e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000ee4000)="2f6465762f7667615f6172626974657200", 0x1) write(r2, &(0x7f0000ffe000-0x5)="23216109", 0x4) execveat(r2, &(0x7f0000ff7000)="2e2f66696c653000", &(0x7f00002ac000)=[], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000000060804000000fffc0c6565643b799365005f1b76"], 0x1000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000b4a000)={0x0, 0x3}, &(0x7f0000131000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00007cd000-0x10)={r3, 0xff, 0x6, 0x5}, &(0x7f0000db2000-0x4)=0x10) preadv(r1, &(0x7f00007ce000-0x20)=[{&(0x7f0000690000)="00", 0x1}], 0x1, 0x400000002) r4 = perf_event_open(&(0x7f0000d07000-0x78)={0x5, 0x78, 0x3, 0x8, 0x9, 0xe8d, 0x0, 0x3, 0x24882, 0x0, 0x572, 0x1000, 0x17a1, 0x2, 0x0, 0x7, 0x4, 0x3d82, 0xee, 0x20, 0x6, 0x1000200000000, 0x5, 0x4, 0x9, 0x8, 0x0}, r0, 0x3, r2, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00001d1000-0xc)={&(0x7f00006b0000-0xe)="2e2f66696c653000", r2}, 0xc) sync_file_range(r4, 0x8, 0x7, 0x7) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000d82000)={{{{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x9, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xa963, 0x3, 0x5, "64a051af7ed6211bcf3f94415fb8396d435f2e318cd7159eb04c32905affb6704132e5b0d664f617379343ae7aad8a2a9d72b9c9ccd91098628988a6425395b2588bbb8a7d22f665f38d693c8feffca1"}, 0x160) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000c13000-0x4)=0x0) readv(r1, &(0x7f0000476000-0x60)=[{&(0x7f0000989000-0xb9)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb9}, {&(0x7f000091b000)="", 0x0}, {&(0x7f0000703000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x45}, {&(0x7f0000be0000)="", 0x0}, {&(0x7f000003c000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x86}, {&(0x7f0000d7a000-0x4)="00000000", 0x4}], 0x6) 2017/12/03 23:59:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000093d000)="2f6465762f73657175656e63657200", 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000a84000-0x43)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000986000-0x4)=0x43) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000d1c000-0xa)={0x5, "d423263e4707"}) r1 = socket(0x10, 0x3, 0x0) flistxattr(r1, &(0x7f000023d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc7) readv(r1, &(0x7f000038f000)=[{&(0x7f000063c000-0xa6)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa6}, {&(0x7f0000874000-0x6)="000000000000", 0x6}, {&(0x7f0000d7f000-0xe2)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe2}, {&(0x7f0000d3c000-0x38)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x38}, {&(0x7f000060e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf0}, {&(0x7f00004f2000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000445000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8d}, {&(0x7f0000793000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6d}], 0x8) write(r1, &(0x7f00005f8000-0x26)="260000005e0009fff10000f83a0000000000000001fbefffebfffffffd00085b1ee9fb4b35ea", 0x26) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000192000-0x20)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x20) 2017/12/03 23:59:38 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000c3e000)="2f6465762f696e7075742f6d6f7573652300", 0x2ee, 0x200000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f000058e000-0x20)={0x401, 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000ac9000)={r1, 0x6}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000e66000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000fe7000)=0xc) sched_setscheduler(r2, 0x0, &(0x7f00009e3000-0x4)=0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0xb) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tun(&(0x7f00005c9000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00007c6000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0xec7}) sysfs$3(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000ded000-0x10)={0x10000, 0xc000800000000004, 0x3, 0x918b}, 0x10) r5 = socket(0x11, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000d28000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair(0x400, 0x7, 0x81, &(0x7f0000ab5000-0x8)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000109000-0x9)="2f6465762f72746300", 0x400001, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00003e3000)="2f6465762f7573626d6f6e2300", 0x800000000000102, 0x800) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000246000-0x18)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000eeb000)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f000095c000-0xa0)={r9, @in6={{0xa, 0x2, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffffffb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0xb710, 0xa3, 0x5, 0xb90}, &(0x7f00003de000)=0xa0) sendmsg$inet_sctp(r8, &(0x7f0000afa000)={&(0x7f0000aa4000-0x1c)=@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000ca7000-0x80)=[{&(0x7f000080e000)="8b", 0x1}], 0x1, 0x0, 0x0, 0x0}, 0x0) sendto$inet6(r8, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) shutdown(r8, 0x1) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000eb0000-0x24)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000a3e000-0x2c)=@ethtool_cmd={0x17, 0x0, 0x0, 0xffffffff, 0x5, 0x5, 0x401, 0x8, 0x8000, 0x8, 0x1, 0xb520, 0x1, 0x8b, 0x80000000, 0x4, [0x7fff, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f00005dc000-0x18)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7}, &(0x7f0000bf2000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000aea000-0x8)={0x0, 0x0}, &(0x7f00000f5000-0x4)=0x8) getsockname$unix(r7, &(0x7f0000c7c000-0x6e)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000c77000)=0x6e) bind$packet(r5, &(0x7f0000c1d000)={0x11, 0x4000000000000000, r6, 0x1, 0x8000000000000000, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14) dup2(r4, r3) 2017/12/03 23:59:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000e9c000-0xa)="2f6465762f7663732300", 0x60, 0xfffffffffffffffd) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000d12000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x7, 0xfffffffffffffffd, &(0x7f0000420000-0x8)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00007f9000-0xc)={0x0, 0x0, 0x0}, &(0x7f00008f6000)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00008bc000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000651000)="2e2f66696c653000", 0xfffffffffffffffd) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f000002b000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400010, 0x400000000, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f000063c000-0x8)="2e2f66696c653000", 0x8) bind$ax25(r3, &(0x7f00004c2000)={0x3, {"0900e958310054"}, 0x1}, 0x10) mount(&(0x7f00009f8000)="2e2f66696c653000", &(0x7f0000344000-0x8)="2e2f66696c653000", &(0x7f00005f8000-0x5)="6e66733400", 0x0, &(0x7f000000a000)="") r4 = socket(0x0, 0x2, 0xfffffffffffffffa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00009ea000)={0x0, 0x8}, &(0x7f0000a57000)=0x6) socketpair$inet_sctp(0x2, 0x72ddddf3970b0ad1, 0x84, &(0x7f000055f000)={0x0, 0x0}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000106000-0x8)={0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000b9d000-0x10)="2f6465762f73657175656e6365723200", 0x400000001, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000a35000-0x4)=0x1, 0x4) socketpair(0x11, 0x880004, 0xffffffffffdffffb, &(0x7f0000114000-0x8)={0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x9) getpeername$netrom(r7, &(0x7f0000c5b000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f0000959000)=0x48) writev(r8, &(0x7f0000a27000-0x10)=[{&(0x7f000007a000-0x39)="39000000130019471100ff00000980fff0000100050000000000000000008005110001000400002100000000040000011018e9070000000000", 0x39}], 0x1) shutdown(r5, 0x0) getsockopt$netlink(r8, 0x10e, 0x800000003, &(0x7f00004f7000-0x9d)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000ac6000)=0x9d) socket$inet(0x2, 0x80f, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00005a6000)={{0x3, 0x2, 0x80000001, 0x1, 0x100}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syzkaller login: [ 50.944833] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 50.976492] BUG: unable to handle kernel paging request at 0000000089fdc2d6 [ 50.983611] IP: lock_acquire+0x183/0x580 [ 50.987635] PGD 5e28067 P4D 5e28067 PUD 5e2a067 PMD 0 [ 50.992884] Oops: 0002 [#1] SMP KASAN [ 50.996649] Dumping ftrace buffer: [ 51.000152] (ftrace buffer empty) [ 51.003830] Modules linked in: [ 51.006992] CPU: 0 PID: 3123 Comm: syz-executor1 Not tainted 4.15.0-rc1-next-20171201+ #57 [ 51.015357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.024677] task: 0000000052cdfd80 task.stack: 00000000cfd9c12e [ 51.030704] RIP: 0010:lock_acquire+0x183/0x580 [ 51.035249] RSP: 0018:ffff88019947e928 EFLAGS: 00010046 [ 51.040576] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.047811] RDX: ffff8801ca89a100 RSI: 0000000000000000 RDI: ffff8801ca89a984 [ 51.055048] RBP: ffff88019947ea20 R08: 0000000000000000 R09: 0000000000000000 [ 51.062285] R10: 1ffff1003328fd2b R11: ffffed003328fd7c R12: 1ffff1003328fd2b [ 51.069522] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000 [ 51.076760] FS: 000000000224d940(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 51.084950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.090795] CR2: fffffffffffffff8 CR3: 00000001994e9000 CR4: 00000000001426f0 [ 51.098032] Call Trace: [ 51.100591] ? lock_release+0xda0/0xda0 [ 51.104533] ? modules_open+0xa0/0xa0 [ 51.108302] ? entry_SYSCALL64_slow_path+0x25/0x25 [ 51.113196] ? lock_downgrade+0x980/0x980 [ 51.117311] __is_insn_slot_addr+0xb4/0x330 [ 51.121598] ? __free_insn_slot+0x5c0/0x5c0 [ 51.125883] ? __free_insn_slot+0x5c0/0x5c0 [ 51.130173] ? unwind_dump+0x4d0/0x4d0 [ 51.134027] ? rcutorture_record_progress+0x10/0x10 [ 51.139011] ? __module_text_address+0x13/0x150 [ 51.143647] kernel_text_address+0x11b/0x140 [ 51.148024] __kernel_text_address+0xd/0x40 [ 51.152309] unwind_get_return_address+0x61/0xa0 [ 51.157033] __save_stack_trace+0x7e/0xd0 [ 51.161156] save_stack_trace+0x1a/0x20 [ 51.165097] save_stack+0x43/0xd0 [ 51.168517] ? save_stack+0x43/0xd0 [ 51.172106] ? kasan_kmalloc+0xad/0xe0 [ 51.175960] ? kasan_slab_alloc+0x12/0x20 [ 51.180074] ? __kmalloc+0x14b/0x760 [ 51.183754] ? ops_init+0x172/0x570 [ 51.187345] ? setup_net+0x319/0x720 [ 51.191026] ? copy_net_ns+0x27c/0x580 [ 51.194878] ? create_new_namespaces+0x425/0x880 [ 51.199597] ? copy_namespaces+0x340/0x400 [ 51.203801] ? copy_process.part.35+0x2364/0x4b30 [ 51.208608] ? _do_fork+0x1ef/0xf10 [ 51.212198] ? SyS_clone+0x37/0x50 [ 51.215703] ? do_syscall_64+0x26c/0x920 [ 51.219731] ? entry_SYSCALL64_slow_path+0x25/0x25 [ 51.224624] ? find_held_lock+0x39/0x1d0 [ 51.228651] ? print_usage_bug+0x3f0/0x3f0 [ 51.232850] ? __lock_is_held+0xbc/0x140 [ 51.236879] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 51.242729] ? kasan_unpoison_shadow+0x35/0x50 [ 51.247277] kasan_kmalloc+0xad/0xe0 [ 51.250957] kasan_slab_alloc+0x12/0x20 [ 51.254897] __kmalloc+0x14b/0x760 [ 51.258405] ? __lock_is_held+0xbc/0x140 [ 51.262433] ? ops_init+0x172/0x570 [ 51.266025] ops_init+0x172/0x570 [ 51.269443] ? mark_held_locks+0xb2/0x100 [ 51.273555] ? net_alloc_generic+0x70/0x70 [ 51.277757] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 51.282737] ? __lockdep_init_map+0xe4/0x650 [ 51.287112] ? lockdep_init_map+0x3d/0x70 [ 51.291228] setup_net+0x319/0x720 [ 51.294732] ? ops_init+0x570/0x570 [ 51.298326] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 51.304175] ? rcu_pm_notify+0xc0/0xc0 [ 51.308028] ? copy_net_ns+0x196/0x580 [ 51.311884] ? kmem_cache_alloc+0x469/0x760 [ 51.316176] copy_net_ns+0x27c/0x580 [ 51.319857] ? net_drop_ns+0x30/0x30 [ 51.323538] ? do_mount+0x2bb0/0x2bb0 [ 51.327307] create_new_namespaces+0x425/0x880 [ 51.331856] ? sys_ni_syscall+0x20/0x20 [ 51.335797] ? ns_capable_common+0xcf/0x160 [ 51.340083] copy_namespaces+0x340/0x400 [ 51.344112] ? create_new_namespaces+0x880/0x880 [ 51.348833] ? _raw_spin_unlock+0x22/0x30 [ 51.352945] copy_process.part.35+0x2364/0x4b30 [ 51.357578] ? __lock_acquire+0x6e9/0x47f0 [ 51.361781] ? __cleanup_sighand+0x40/0x40 [ 51.365984] ? __lock_acquire+0x6e9/0x47f0 [ 51.370190] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 51.375685] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 51.380496] ? __lru_cache_add+0x2a4/0x410 [ 51.384695] ? __pagevec_lru_add+0x30/0x30 [ 51.388900] ? check_noncircular+0x20/0x20 [ 51.393102] ? lru_cache_add+0x1c7/0x3a0 [ 51.397127] ? lru_cache_add_file+0x20/0x20 [ 51.401431] ? rb_insert_color_cached+0x1660/0x1660 [ 51.406412] ? find_held_lock+0x39/0x1d0 [ 51.410439] ? lock_downgrade+0x980/0x980 [ 51.414552] ? __handle_mm_fault+0x2b38/0x3dd0 [ 51.419101] ? check_noncircular+0x20/0x20 [ 51.423300] ? lock_release+0xda0/0xda0 [ 51.427243] ? do_raw_spin_trylock+0x190/0x190 [ 51.431792] ? _raw_spin_unlock+0x22/0x30 [ 51.435905] ? check_noncircular+0x20/0x20 [ 51.440105] ? __pmd_alloc+0x4e0/0x4e0 [ 51.443958] ? find_held_lock+0x39/0x1d0 [ 51.447988] _do_fork+0x1ef/0xf10 [ 51.451413] ? fork_idle+0x2d0/0x2d0 [ 51.455091] ? lock_downgrade+0x980/0x980 [ 51.459206] ? handle_mm_fault+0x476/0x930 [ 51.463410] ? down_read_trylock+0xdb/0x170 [ 51.467696] ? __handle_mm_fault+0x3dd0/0x3dd0 [ 51.472242] ? vmacache_find+0x5f/0x280 [ 51.476183] ? vmacache_update+0xfe/0x130 [ 51.480299] ? up_read+0x1a/0x40 [ 51.483631] ? __do_page_fault+0x3d6/0xc90 [ 51.487831] ? vma_set_page_prot+0x16b/0x230 [ 51.492207] ? mm_fault_error+0x2c0/0x2c0 [ 51.496320] SyS_clone+0x37/0x50 [ 51.499653] ? ptregs_sys_rt_sigreturn+0x10/0x10 [ 51.504375] do_syscall_64+0x26c/0x920 [ 51.508226] ? __do_page_fault+0xc90/0xc90 [ 51.512426] ? syscall_return_slowpath+0x550/0x550 [ 51.517321] ? lockdep_sys_exit+0x47/0xf0 [ 51.521433] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 51.526240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.531046] ? sys_vfork+0x30/0x30 [ 51.534552] entry_SYSCALL64_slow_path+0x25/0x25 [ 51.539271] RIP: 0033:0x455369 [ 51.542427] RSP: 002b:00007fff88c25008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 51.550099] RAX: ffffffffffffffda RBX: 00007fff88c250c0 RCX: 0000000000455369 [ 51.557336] RDX: 0000000000000000 RSI: 0000000000a6ffb0 RDI: 0000000074000000 [ 51.564571] RBP: 0000000000000000 R08: 0000000000000017 R09: 0000000000000017 [ 51.571805] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000040e8d0 [ 51.579042] R13: 000000000040e960 R14: 0000000000000000 R15: 0000000000000000 [ 51.586281] Code: df 48 89 f9 48 c1 e9 03 0f b6 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 fe 02 00 00 c7 82 84 08 00 00 01 00 00 00 1f 44 00 00 65 8b 05 b1 c9 aa 7e 89 c0 48 0f a3 05 37 5f 08 [ 51.605337] RIP: lock_acquire+0x183/0x580 RSP: ffff88019947e928 [ 51.611356] CR2: fffffffffffffff8 [ 51.614780] ---[ end trace 784a0293e7ce438e ]--- [ 51.619497] Kernel panic - not syncing: Fatal exception [ 51.625696] Dumping ftrace buffer: [ 51.629203] (ftrace buffer empty) [ 51.632876] Kernel Offset: disabled [ 51.636466] Rebooting in 86400 seconds..