INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-2,10.128.15.221' (ECDSA) to the list of known hosts. 2017/12/05 17:10:17 fuzzer started 2017/12/05 17:10:17 dialing manager at 10.128.0.26:37073 2017/12/05 17:10:26 kcov=true, comps=true 2017/12/05 17:10:27 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000dea000)="2e2f66696c653000", 0x0) r0 = open(&(0x7f0000033000-0x8)="2e2f66696c653000", 0x0, 0x0) mkdirat(r0, &(0x7f0000034000-0x8)="2e2f66696c653000", 0x0) mount(&(0x7f0000df2000)="2e2f66696c65302f66696c653000", &(0x7f0000a17000-0x8)="2e2f66696c653000", &(0x7f0000df3000-0x3)="007609", 0x1001, &(0x7f0000a06000)="") unlinkat(r0, &(0x7f000057d000)="2e2f66696c653000", 0x200) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000e0e000-0xc)={@loopback=0x7f000001, @loopback=0x7f000001, @empty=0x0}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000e30000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000859000)=0xb) r2 = socket(0xf, 0x803, 0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f000057c000-0x8)={0x0, 0xe67a}, &(0x7f0000a44000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00003d6000-0x8)={r3, 0x9}, &(0x7f0000a86000-0x4)=0x8) write(r2, &(0x7f0000506000)="0206af0002000000070000008e0007fa", 0x10) execve(&(0x7f000074c000-0xe)="2e2f66696c65302f66696c653000", &(0x7f0000f44000-0x18)=[&(0x7f0000253000)="00", &(0x7f0000d02000)="e600", &(0x7f0000728000)="007609", &(0x7f00001d8000)="007609", &(0x7f00008be000)="6c6f00", &(0x7f0000a5e000-0x3)="007609"], &(0x7f0000605000-0x18)=[&(0x7f00002b3000)="2b00", &(0x7f00004be000)="212300", &(0x7f0000e19000)="007609", &(0x7f0000b4c000)="00", &(0x7f000051f000)="007609", &(0x7f000021b000-0x10)="6b657972696e67776c616e30656d3100"]) stat(&(0x7f000068e000-0xe)="2e2f66696c65302f66696c653000", &(0x7f0000653000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00001aa000)=0x0) mount(&(0x7f00006ec000)="2e2f66696c653000", &(0x7f0000027000-0x8)="2e2f66696c653000", &(0x7f0000ad2000-0x5)="6e66733400", 0x0, &(0x7f0000293000)="") 2017/12/05 17:10:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f000035b000-0x4)=0x0) r2 = syz_open_procfs(r1, &(0x7f000031a000)="6e65742f7564703600") perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f000069e000)=[{&(0x7f0000b3e000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xb3}, {&(0x7f0000cdc000)="000000000000000000000000000000000000", 0x12}, {&(0x7f000053f000-0x95)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x95}, {&(0x7f000031b000-0x48)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x48}, {&(0x7f0000941000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf4}, {&(0x7f0000f5c000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28}], 0x6, 0x400000000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000aa7000-0x9)="2f6465762f76637300", 0x10040, 0x0) fdatasync(r0) connect$nfc_llcp(r3, &(0x7f0000a0b000-0x60)={0x27, 0x97, 0x3, 0x7, 0x3, 0xfff, "8545d548b828bc6fd8cd1e853d332510a8e158dfeaf569ce497bc50cdb774cc26f9a2721808e3be50db22530f08839be75562a9dfb2018081900f8b66812d1", 0x3}, 0x60) fstatfs(r3, &(0x7f0000cba000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000df3000-0xc)={0x0, @local={0x0, 0x0, 0x0, 0x0}, @local={0x0, 0x0, 0x0, 0x0}}, &(0x7f0000cf2000-0x4)=0xc) r4 = semget$private(0x0, 0x3, 0x10) semctl$GETNCNT(r4, 0x7, 0xe, &(0x7f0000409000-0xee)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r5 = syz_open_procfs(0x0, &(0x7f0000719000)="6e65742f69676d7000") preadv(r5, &(0x7f0000806000-0x10)=[{&(0x7f00006d5000)="00", 0x1}], 0x1, 0x800) getsockopt(r3, 0x8, 0x7fe, &(0x7f00009a4000-0x9d)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00001e8000-0x4)=0x9d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000dc000-0x38)=[@in6={0xa, 0x1, 0x9, @loopback={0x0, 0x1}, 0x8000}, @in6={0xa, 0x1, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfff}], 0x38) 2017/12/05 17:10:27 executing program 7: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000002000)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000000e000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x28, 0x0, &(0x7f000000d000-0x70)=[@decrefs={0x40046307, 0x0}, @acquire={0x40046305, 0x0}, @exit_looper={0x630d}, @increfs_done={0x40106308, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000005000)=""}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x44, 0x0, &(0x7f000000d000)=[@register_looper={0x630b}, @increfs_done={0x40106308, r1, 0x2}, @clear_death={0x400c630f, 0x0, 0x2}, @increfs={0x40046304, 0x0}, @decrefs={0x40046307, 0x4}, @release={0x40046306, 0x1}, @register_looper={0x630b}], 0xcf, 0x0, &(0x7f000000c000)="621644a5c310affb2298c023c7036e8915400419dae84f459e387ad57913e733b1615bd7c2d55328b9dff40f10d1fc0e41a052600c822c2d8d8f871ff1edbf244f0f2cd508303ac65af7b6e583043a7e0a2902c8894588ca2939b0cdde53ac775626c3f7b56d47d541ae3c7ff339dea59c1db165921f7c0494781ebf9a8702e5c85434c91768422a6a95c0920a655330554a5239e667da7768ee32ae289cf729b0d7cf69ba3ee1ffdc373f2becd4e20cc1e8c377d436e1706a24cde3784a2223db96a57daf9a0003d38776bb5c6f17"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003000)={0x120, 0x0, &(0x7f000000f000-0x120)=[@increfs_done={0x40106308, 0x0, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x8, 0x10, 0x0, 0x0, 0x28, 0x10, &(0x7f0000010000-0x28)=[@ptr={0x70742a85, 0x1, &(0x7f0000002000)="74", 0x1, 0x9, 0x860}], &(0x7f0000005000-0x10)=[0x48, 0x48]}}, @dead_binder_done={0x40086310, 0x2}, @enter_looper={0x630c}, @release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x4f1, 0x1, 0x0, 0x0, 0x48, 0x28, &(0x7f000000e000-0x48)=[@fda={0x66646185, 0x66, 0x100000001, 0xfffffffffffff9d3}, @ptr={0x70742a85, 0xe56, &(0x7f000000e000)="92", 0x1, 0x85, 0xb42f}], &(0x7f0000008000-0x28)=[0x30, 0x0, 0x48, 0x28, 0x38]}, 0x8}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x7, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000006000-0x50)=[@flat={0x77682a85, 0x100, 0x0, 0x3}, @fda={0x66646185, 0x4, 0x4, 0x2}, @flat={0x77622a85, 0x101, 0x0, 0x0}], &(0x7f0000004000)=[0x0, 0x40, 0x60, 0x0, 0x78, 0x38, 0x0, 0x40, 0x48]}, 0xffff}}], 0xee, 0x0, &(0x7f000000e000)="64f09506e160a116164ba89a48473bd0f7dc7b71aa3bbf1b00dd2152aa02704bf18995c278980417deb1fda7a40c743820e91c936ac63cc085726187dc20d267fe1f33b18bcf0d8f9f94c8661c54af1c2ed65a329bbe18e972e6f5ea2999e6478a7f4c76e352c1469a7c4990582ac7eed31acfd4b6a93b1073423496879d592348b6ed59ce36983cf7acc727100459b055a3c01d4373925232e0438857a819a55d8b56932be7a203d7b576349ca2737ff1a33f478871d3da93d7fc09a334829bc6e93c37b1cf10a4f88cffa6fd31a9c7b437ff8c15281806fce44c5e31d8a46e6c9eac9ec6deb8b7ff7c64961c27"}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2017/12/05 17:10:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00008b2000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000175000)={0x8, 0xdbea}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00006bb000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f11000-0x4)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001000-0x10)={r3, 0x3ff84, 0x2000, 0x20000000000000b}, &(0x7f00004f7000)=0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00005ff000)=0x100000000000045) setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000f61000-0x10)={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r6 = syz_open_dev$loop(&(0x7f00002a0000)="2f6465762f6c6f6f702300", 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40d, &(0x7f00007cb000-0x8)=0x1) ioctl$LOOP_CHANGE_FD(r6, 0x401070ca, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r6) openat$autofs(0xffffffffffffff9c, &(0x7f0000f43000)="2f6465762f6175746f667300", 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f000053f000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000cd6000-0x78)={0x1, {0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2001000000107, 0xffff, 0x80000001, 0xffff, 0x7, &(0x7f0000717000-0x10)=@generic="8aa097c88532bddc353b6a2bf8a3395c", 0x7, 0x4000000000000000, 0x7ffffffd}) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f0000509000-0x4)=0xfffffffffffffffe, 0x4) bind$inet(r2, &(0x7f0000676000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r5, &(0x7f0000847000-0x1)="e2", 0x1, 0x20000000, &(0x7f00002bc000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_str(r1, 0x1, 0x19, &(0x7f0000109000)="6e6f646576656d3173656c666d643573756d7070703000", 0x17) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000cec000-0x8c)={r4, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f000055c000)=0x8c) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00008f3000)={0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000a73000)={0x4706, 0x538, 0xffffffffffff543a, 0x7fffffff, 0x2}, 0x14) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000106000)=0x2, 0x4) sendto$inet(r5, &(0x7f00004b0000-0xa6)="50d844de52a3027a79035d579f2f961c3b4b95da97b7917bd3733cc15f92db9279000000000000ffffc4729da484c2bafaf78b873b2e4ff189c1d881ea0c5b885c3ba3d9c89e51630041fc47a52238f8d7ed9ae8eddc5da8e46f989a7eb7ad8e8a4559787290923d84d2141b60d3d1c1f5986d5e4069106c7b4e1ca38f71a6001c66c9c9815b1c8205921af9ecb7349368432b798b57d3fd1d087f16c78b49a5c2000c2e96e4", 0xa6, 0x20008802, &(0x7f00006ed000-0x10)={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/05 17:10:27 executing program 5: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x882, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x4, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00004a5000)=0x75) openat$ptmx(0xffffffffffffff9c, &(0x7f000028f000-0xa)="2f6465762f70746d7800", 0x216000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000cd3000)="2e2f66696c653000", 0xfe) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000060000-0x14)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f00002de000-0x4)=0x14) sendto$packet(r1, &(0x7f000061e000-0x1000)="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", 0x1000, 0x40, &(0x7f00000d7000)={0x11, 0xf, r3, 0x1, 0x7f, 0x6, @random="c3295773b839", [0x0, 0x0]}, 0x14) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00004c9000)={0x6, &(0x7f0000ff9000)=[{0x4000000000000000, 0x2, 0x0, 0x9}, {0xffff, 0x5a, 0x2, 0xfffffffffffffd41}, {0x2, 0x1, 0x8, 0xfffffffffffffffe}, {0x9, 0x55f, 0xcb8, 0x200}, {0x1b82, 0x9, 0xfec, 0x0}, {0x6, 0x771, 0xfffffffffffffffc, 0x100000000}]}, 0x10) perf_event_open(&(0x7f0000b21000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000001000-0x5)="6574683000", 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_unlink(&(0x7f0000860000)="6574683000") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x0, 0x78, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000bd4000)=0x75) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000c11000)=@req3={0x0, 0x0, 0x18000000000, 0x0, 0x7fffffff, 0x1000, 0x0}, 0x1c) r4 = syz_open_dev$mice(&(0x7f0000f5e000)="2f6465762f696e7075742f6d69636500", 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) r5 = syz_open_procfs(0x0, &(0x7f0000977000)="73636865647374617400") ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x45, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00004f2000-0x8)={0x0, 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000907000-0xb)="2f6465762f6877726e6700", 0x101000, 0x0) linkat(r6, &(0x7f000025f000)="2e2f66696c653000", 0xffffffffffffffff, &(0x7f000065d000-0x8)="2e2f66696c653000", 0x1400) ioprio_set$pid(0x3, 0x0, 0x20000000000000) 2017/12/05 17:10:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000cf8000-0x1)=0x3, 0x4) r1 = socket$inet6(0xa, 0x10000000000006, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) socketpair(0x9, 0x7, 0xbf, &(0x7f00007de000-0x8)={0x0, 0x0}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000c7c000-0x2)=0xffffff7ffffffffe, &(0x7f0000e0d000)=0x2) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000b1e000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r4, &(0x7f0000db8000-0x79)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x79, 0x10001, &(0x7f00009ce000)={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r5 = socket$inet(0x2, 0x1, 0x6) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000273000)={0x0, @in6={{0xa, 0x1, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f000078d000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f000003a000-0x8)={r6, 0x7}, &(0x7f0000a7b000)=0x8) setsockopt$inet_tcp_buf(r4, 0x6, 0x48590edbadd06799, &(0x7f00004d4000-0xa3)="85d661b0660a792d96b4023fd1d9cd8406a690d34a207aadd98e0f18fa65e0747667134a48b79cf3b3a9d3a94f2c16f2072f18a1b0ea3c3853494ee53dd09f854d8cbed47b144cf3c1e9edcc11b40879fa5d44146bfe178b36cc030a07e4b9cc07a52e646c5198e8a8f36e2620a0cd72a699f423f299ad4022d62d861deb21cc8911639ee51548512ae2f1f9a33862cff21c62189cebce0dbad98800edf9c552c0cc82", 0xa3) listen(r1, 0x8000) getsockopt$inet6_buf(r2, 0x29, 0xff, &(0x7f0000f77000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000b1d000-0x4)=0xc9) listen(r1, 0x7a) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000487000)={r7, @in6={{0xa, 0x2, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) connect$inet(r8, &(0x7f00006ec000-0x10)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000179000)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000007a000-0x4)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000269000)={{{@in=@empty=0x0, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3, 0xffffffff, 0x1, 0xfb, 0x1b, 0x80, 0x0, 0x0, 0x0, 0x0}, {0x769, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, {0x8, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x0}, 0x0, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) sendto$inet(r8, &(0x7f00008cb000)="c973", 0x2, 0x0, &(0x7f0000874000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000137000-0xc)=@sack_info={r6, 0x2, 0xe56}, &(0x7f0000e04000)=0xc) r9 = accept(r1, &(0x7f000080e000)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, &(0x7f0000a57000-0x4)=0xe) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000e29000)=@common="697036746e6c30000000000000000000", 0x10) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000366000-0x12)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x6}) socket$inet6_sctp(0xa, 0x4000000000001, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000993000)={r0, r2}) close(r9) 2017/12/05 17:10:27 executing program 1: mmap(&(0x7f0000000000/0xd39000)=nil, 0xd39000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0xff, 0x6, 0x6, 0x0, []}) ioctl(r1, 0x8916, &(0x7f0000000000)="") sendto$inet6(r0, &(0x7f00005d4000-0x2)="dff6", 0x2, 0x48083, &(0x7f00006b1000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) ioctl(r1, 0x8936, &(0x7f0000000000)="") sendmmsg$alg(r0, &(0x7f0000497000-0x118)=[{0x0, 0x0, &(0x7f000050b000-0x50)=[{&(0x7f000096d000)="1d", 0x1}, {&(0x7f0000116000)="8c0cf628dc34c70f76cfaa1d9b820e06063166f19abe0ae7efa394390382c3825d2fd6eff6e2180df69f782676a0b1fa34f1ec87c5b14e1704535bed75762cd1845979f1b5c1dfa42108dedf7d7e9899299f286f2057bc965fe3837cf247bf2b6b6100", 0x63}, {&(0x7f00007fd000)="86931678ec216aeb6b5d2c5025b6812752c34d1362b4c0c3bc3fd335a8875e67e28975af9d89ac46068047da41d1df00c28d3a597530b7501e5120c509cc6b365c0258327a017361c91139b3c5aa88de9b49b37df6b97a7dbc760136abfa07a2793f4b98a83952a476b7b3e14b4f09713c0e73560299671fa55372efa7d37f58e01acba4b53f2106532bdc34ad156fd33f5fc8d43a7f1c7b14d1c170de7906cbce585b62697d671712fe11450cf7b2c2d143b92b64e00995c1a0f6d4535d4b4a0c1360da645dd464a21240c2975f962f71be36ca2fc0", 0xd6}, {&(0x7f000010b000-0x94)="7f4431d6c3f998cf86062239205a80c53cafd29242c7e02d079cea261f5cd6a6ef3cfcf2dec8cab74ae339bdb954a63ed4a2126be653b5939feda6f06010830bbb9cc3caf80522fafa41a843f0a491b821e7d1463b846a0a428250fabf2d7d6d3e34eafd47a322ef794a3cb29dd97e455f7a307622eb88098004dfb33a78788a58bf563b9b661835739542bbd4e0ff8d3cbb0599", 0x94}, {&(0x7f0000e60000)="2f699ca5e64266e7c964e0b226478151ee54b65903d9674905d7e77882eccb6081fb0fe08462bed97711272cb5e81eecd664411af658cfc24552151b20140e97a48d1d985a5d532bca9331b4efcad0d75b4345227824be191ff79d4b52c7cc72a42ac4f36513547c1895d300ed", 0x6d}], 0x5, &(0x7f0000c1c000)=[@assoc={0x18, 0x117, 0x4, 0x0}, @assoc={0x18, 0x117, 0x4, 0x400}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x101}], 0x60, 0x8000}, {0x0, 0x0, &(0x7f00004ea000-0xa0)=[{&(0x7f0000af4000)="c741ae46e4e1815c03bacda7bc1be92b9535b7ba206186ccdc093f9ea12451fd0bd16debdbce4c601070716e7ac7491d836de3c6756844634a88c11bea235f55ec8d95f0815c2b269fe2c109671efed91352816706fcb50200f6a16fcb1e97a5c9af0e407d8e5fb32b982855067813b33536c4196d7b2e630c27cd1a976f1cedc08438c7c9276eed7fbdb2083f73087ac8e334b43c34ead0b566cdd4e3c421193727686256ac70df32ded7675420b81c2c04cacae8cc5466c6bd47ea4803d44b3ba8a2", 0xc3}, {&(0x7f0000b3e000)="46cc693f7be8989468cc919978d8b717f77c0c94ab7defd099c169ececd432c8c14518a523496738", 0x28}, {&(0x7f000052c000)="50602079f00f57f098c43e95b59a2339b44ccb9d62a9923fb2cd46981b9ef990f0f5e1376718a10b5e2d29ee2c944de99120bd960cca8ce45479e67c4f0243aed4661be61692aa8ed4480f5a324075083d48716ae672e73a46f90545288a88ce4927e271831c7ec3bcc53caeb564ed4e5ab248a1ed9d92d0dca2a3606573d83982b05aae6d406c45aa09cbd41d070b55f2e639a58f78c8d9c5ec8a2bf56f350e6c49", 0xa2}, {&(0x7f00005ec000-0x66)="a518f14dd94313aad628bcf350ba46800e5b3dab71f77da4febcc5a653c821933b34204658e709636fd529deaa340eb086eee917b223710715eef688aa97bbbef5d4ec72fcb1d26980f05aa4e358fe07a38b025c8e72397b1319891ae6ae1c7de73e40c00769", 0x66}, {&(0x7f0000f39000)="7d752e10959c7488f32192c1802d54eea3169b75beecd7612bf205b13b9697dc43bcaea90c4365fec3417d6a452921ea7f2a5720b3ff235bc98d641926854b73ebedadd7ef1970bb24f1b2cba9227d19af463af39063148a09c147f36f6e6a50a52a9d3e2ad899ace75b71656f844fd4268f52e08c3eb722d9ad75cd504fa786e3c0ca1fdbbb338fc88c39b7e37d73995530c167aa62eb391bd917c0e5f0923a93e94028d46283a4f2059f5baa19a78c2abde9f22a119fa500075b8038", 0xbd}, {&(0x7f0000bbe000-0xf1)="3e7b1d280b4fe8567c1d0176df9e383605784ea620a3dcaa9bebea3a2e84dc76455ca0fa31fd4eb55530650e9e6ac0100ab02ce2ccc4a53979f6d58f2883f9bcf9be15709ea05a6cc5d27221170d23443276fbde9f49d42fc934f6bcfd9516eae305b439d570f693be974ab36e4ff43a39ba3db7c155ce5c02e75632fe53b2407070c6d7498a93ae815cbcc8d5ac9364debd2edfb134f9baa74ceee3d6c9e54da9e486d015e1d1a1dde5edff5f5f32dc92b6e03536c7d6d58706b359166f92bc9c1c6d7092300856fc7711ff240da2cad75cc9698f7c9f22bf7a2decbabc0bbf16344ee5a8e53f6002a249b439b91c046c", 0xf1}, {&(0x7f00007da000-0xe1)="a0ba0449f8745ad5cbab8685faed4149616dcf59727ee4b71e5e7fe763d3141abc7384285768c5d8dec57e40286b0d2d079f0b20f8a778e243403fc14613234b28f868db3c375a5e11cb51303a3d0a701631f79bd34ced2a4c841b5250a5bee7b254ce35e2f640ebce78402682cd896087523b3b0cabf41dc0829ec4aa0ec1e3f2449100cba3c9f3d79337c1e043c3a85dcf3c62694b876d99ee8cedad15894b9b56baa775865321c2757359a368a4568b7c277a43d17adf80c267d15e3141d4d653197b85dca31ce0869ef94634fa085440cd30d443959ae9dc4f1c90cb5bbe6c", 0xe1}, {&(0x7f0000fb6000)="fb4fa1c7763924b46d51ee699daa06", 0xf}, {&(0x7f0000d92000)="97636fb2a786547111b304dfe4ba439635404406a453052a8998cd9aea27ac37c53c1cc7eebe2ebd1e00f861a5813d3a3a1bf29ba1547457019bf1bef69a4570e02c6186e645c885fbb3323b61236b15a245ea0528eb84a28283c861184804f662d0e03e11cc9769f3ce30bcde68c8a1435e9f8d1563cf564514812f76f146c6e64725a934fc723c766990876a621d2299f5a85d763823aa9f9f3564dafe88bf198ea5e8fd2153", 0xa7}, {&(0x7f00007ef000)="43675804fc8b4e6ff5106dc9dcbe82a99753387051f9ec3cd320c072e478d8e865c28677a1a6ce28d4926e9dccead4d1de559ac356bb9c02570b3b96ff2e27f6d60a59a2", 0x44}], 0xa, &(0x7f00007ea000-0x88)=[@assoc={0x18, 0x117, 0x4, 0x10000}, @iv={0x40, 0x117, 0x2, 0x27, "6e1e6f159edc4c7474ebb7ac293977ad444154856b4271711237bc767123cc6b071adb2c5ab984"}, @assoc={0x18, 0x117, 0x4, 0x0}, @op={0x18, 0x117, 0x3, 0x28ea}], 0x88, 0x1}, {0x0, 0x0, &(0x7f0000f97000-0x20)=[{&(0x7f0000891000)="c99891be60cfa144bc58fc7d0cce94558912a0e6e9e81139346d4f3fce8012adc08ecca6e3efcd9bf7dd9d2dc3ce89f05011299f7e9bf0dc71b2e7da3de7b0041672ba4a89e8f8adaeda590d3c6f87ee525452b0d30793351de172caaba2df69ad18f3856fa1fee6d7fa9475a54fb8f9579815ff2e19ee7817781791c782aa54a24a35224adfa2acd2ff6e780f945ff21e834dc4265bfb7e8f6cf6a8e7614a21af68b1", 0xa3}, {&(0x7f0000f9d000+0xbc9)="70b3c8a9718d5ca4997e445f27479e004bb69590c59647503cef67fa61fa70a272252ac7ea4d66730eccc5aaeb3c181f1eee546c7a13fa98a9ee1918a79ee7c74d142f1742146a6a0066106f1bf98a8dc735a34934d661aa73b32b918d0e339c2f5209eacd445441", 0x68}], 0x2, &(0x7f0000ac1000-0xc8)=[@iv={0xc8, 0x117, 0x2, 0xb4, "66f7c53cba263b5af9c43e14510a8364b552f1c7321fac0d79656991c8c5d9fa94c50d1700e7ce3cbaf0d4d35769187721ccf7b2130ebfe1e9949e6cd0f353ad4fb350d83b98795902466858439636c1452454b241de0a122481af3912dc799bb289d995a9e196980cbca8d456805a69c508f32f5f99f1a025b72d01765fbed67ba618c8b7493662d2650e17d759c609fb40c90cdfea3ec4c30e9ed48dc63130a7ea49827b65b3cc1328ee90fafce8c993d29fab"}], 0xc8, 0x40810}, {0x0, 0x0, &(0x7f00005f7000-0x10)=[{&(0x7f0000eb3000-0x9f)="5f604ba0e56b5d2091f8065317f3f1b5a167d1c3ab86446bd19c1ff385b2066b260603bd1baab2f9b9b5be0cada3d6fdc6c6d2bd6b5abafa05a534c7e3f79dea7cafe7ed1a818915e0c136de076b6a2c133c069040927dcb6ad776d0c87ba731205a0ca25e796591196ec8e94f09f3a2eb323235ec1e0ef9fdfe6fffd4471f1aeb64887174de6126a6ec9beadcc2e702d9c6f1bf24808b9337b3b898111648", 0x9f}], 0x1, &(0x7f00006b7000-0x30)=[@op={0x18, 0x117, 0x3, 0x0}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30, 0x4000}, {0x0, 0x0, &(0x7f00005cf000)=[{&(0x7f0000629000-0x93)="670a6edc7bad7ae982ea4ed391870fb2cf45c5cdfa6b798b51ca98ef4781e283fca573a859bd924f8c3daa9b08334a3316e92aff825f81a97ea2442ba00522c17f931d351cd5cd2f570ad7a92d9394cc135f4dbee2ad0fc64167dcb0fdeeaf3a783e13640a18ecdccff5addc8464c864120eab04a44a62e46348b245704a4ed244ea273ab52dcd1e65ca5c6d2bd0fcb1315d11", 0x93}, {&(0x7f0000874000)="9aa933ce15a3591b6603d501551f37df7944197f068d13dce61131866b7cbe5804f2594f11121d256a9e169e5dc3c2fa51ab28500859cc189c60e3696a6b1d3d4aae70cd47dd1b9128dfc8158018fa7e794fd24b05c21c", 0x57}, {&(0x7f0000ac2000)="e53f0531483d17ad281240d03fc7991b9bea046437774850c6f9c60a88d7658e8fbc39cb6c7eed405c7b62601ff915a63503f2e4541000488a17184441cac75b9a9b9c61b0bf5ad41a0fc3d0c87303952b4018418b5fecfff7857c2b459c11657c6fbfcf7cc105a4f352a38e0566869af7462913cceac7d5477544747edd71ea032ba193034cb1122af995baf9f58720b016b00010000000000000d8bdc6e59aa434493df88189e84efc0cd1bd7144e95bfd36782ba139222c964bd0086aa7c401a57c4a3ae038728b3f1a47", 0xcc}, {&(0x7f00007a4000-0x87)="267152bea7175cbfb6f4233164e95cc81d7cf557515d17ec516a021810ca5685eda7522a6fa7ac4f4985bd3b1bcfa5c0aa7849e427481ccd3dc3a7ecf66d7044b96ac361abe096771b34732afacb508708125d3476b7509a41e625743beeff039a9af1126a882a3e3d4a63f8bf066559837d778bc4b8e19c2d60b2477de7b4be6a730fcb1ea63b", 0x87}], 0x4, &(0x7f0000234000)=[@op={0x18, 0x117, 0x3, 0x7}, @op={0x18, 0x117, 0x3, 0x9b}, @op={0x18, 0x117, 0x3, 0x3}, @op={0x18, 0x117, 0x3, 0x10001}, @op={0x18, 0x117, 0x3, 0x9}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x101}, @op={0x18, 0x117, 0x3, 0x3}], 0xc0, 0x0}], 0x5, 0x4000800) r2 = socket(0x11, 0x1000000883, 0xfffffffffffffffd) pwrite64(r2, &(0x7f0000b16000)="34", 0x1, 0xfffffffffffffefd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000d39000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r3, &(0x7f0000d39000)={0xa, 0x1, 0x6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20000000000000}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xefe000)=nil, 0xefe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000eff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f00000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f01000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f02000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x10000, 0x9, &(0x7f0000f02000)={0x0, 0x0}) mmap(&(0x7f0000f00000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4(r4, &(0x7f000048b000+0xd36)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f00003b9000)=0x10, 0x80000) mmap(&(0x7f0000efe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$llc(0xffffffffffffff9c, &(0x7f0000db8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000a54000)=0x10) read(r2, &(0x7f0000e48000-0xa1)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa1) 2017/12/05 17:10:27 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create(0x5) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) ioctl$sock_ipx_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002000)={"0200000000000000c5d6120000e24000", {0x4, 0x803, 0x8, "334000e0ff00", 0xffffd, 0x0}}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf64000)=nil, 0xf64000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xfe, &(0x7f00005d1000)="", &(0x7f000043d000)=0x0) mmap(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f65000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000f67000-0xa0)={0x0, @in6={{0xa, 0x0, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x84e, 0x553e, 0xfffffffffffffffd, 0x546, 0x1}, &(0x7f0000f66000)=0xa0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000f66000)={0x0, 0x8001, 0xfffffffffffffc00, 0x5, 0x81, 0xff}, &(0x7f0000998000-0x4)=0x14) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000060b000-0x8)={0x0, 0xae}, &(0x7f000082d000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000f67000-0xc6)={r1, 0xbe, "9ad247d102dd830f16935b9fc66b9089491f8eb0262200470283474b2ba250cbc92757dac204d56fc32a742197f6f9a302bb41b107a9fd899330b0127aefb25052884c2a3900ad630c2ce16030ca4d48b6d5743302320760e8da7cdb0194d74dc6c25dd20dc7d01524153fa979f43f710a5d7e763c0160b564d288a22c0000000000000002790c7b20e4ab2f131a4f798a7c2fb842400d689a771dccbfb312fd7d242ea8a1d46be42394b02aaca78a10a4be75609ccf5ee17d1e9c9295f9"}, &(0x7f000052d000-0x4)=0xc6) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000f67000-0x98)={r2, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5a6f1341, 0xfffffffffffffffe}, &(0x7f0000661000)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00004b7000)={0x0, 0x4}, &(0x7f0000aac000-0x4)=0x8) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000f66000)={0x3, &(0x7f0000bc4000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f67000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000f67000)=0x0, 0x4) sendto$unix(r0, &(0x7f0000ef4000)="e390517a0d69000000cd0940000026705fb30a0002b3724c7d655f885c5bc9d8c342a601d9119677", 0x28, 0x0, &(0x7f0000001000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) mmap(&(0x7f0000f65000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f66000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/05 17:10:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000755000)="7569645f6d617000") ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000714000-0x4)=0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="", 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00003d4000-0xbc)={0x8, 0x2, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2, "0dda176df9565cad", "98372afcd81f905f388f4a2d95d7fc3594a10b6b32562f7324b9f5323888e14c", 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write(r0, &(0x7f000010c000)="2200000039000701000700007d00071502010008002720000000000000101f009f7590", 0x23) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000c72000-0x26)="0000000000000000000000000000000000000000000000000000000000000000000000000000") 2017/12/05 17:10:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x42, &(0x7f0000000000)="", 0x0) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x1000000, 0x40000032, r0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xaf9000)=nil, 0xaf9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000af9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000afa000-0x9)="2f6465762f6b766d00", 0x4000000a000400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap(&(0x7f0000af9000/0x1000)=nil, 0x1000, 0x2, 0x40050, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x11)="2f6465762f7667615f6172626974657200", 0x22000, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xcffc) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000011000+0x6e8)="2f6465762f7161745f6164665f63746c00", 0x8045, 0x0) mmap(&(0x7f0000af9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000afd000-0x8)={0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000afa000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006c2000/0x2000)=nil, 0x2000, 0x2, 0x10, r6, 0x0) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000a71000/0x18000)=nil, &(0x7f0000afb000)=[@text32={0x20, &(0x7f0000801000)="b90401004066b84710000000d0ba000000000f3052c76dfef3ab66b8c4e3995c2708000f9e66baf80cb8dc405686ef66bafc0cb874000000efe0e066ba210066ede02ec1e8050f3235001000000d30ef66bafc0cc966e955e96d266767f2a50f20d835080000000f228bb9bebe0f070f01b102000000", 0x76}], 0x1, 0x20, &(0x7f00002c5000-0x20)=[@cr0={0x0, 0x10000}, @cstype0={0x4, 0xe}], 0x2) r7 = socket(0x19, 0x80000, 0x6) mmap(&(0x7f0000236000/0x4000)=nil, 0x4000, 0x2000010, 0x32, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000afd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000afe000-0x4)=0x81, 0x4) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000018000-0x48)={0x3ffff, 0x0, [0x9, 0x0, 0x7, 0x8, 0x7, 0x8000000000001ff, 0x0, 0xffffffff7ffffdff]}) mmap(&(0x7f0000afb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000afd000)={0x8, 0x0, [{0x8000000a, 0xc, 0x3, 0xf7ff, 0xd27, 0x0}, {0x7, 0x1, 0x2be6, 0x800, 0x200, 0x0}, {0x1, 0xbfc, 0xada5, 0x6, 0x2, 0x0}, {0x80000001, 0x2, 0x2000000007, 0x9, 0x8, 0x0}, {0xc0000001, 0x10000, 0x1004, 0x1ff, 0x2003ff, 0x0}, {0x0, 0x6, 0x1f, 0x9, 0x3, 0x0}, {0x80000008, 0x8001, 0xfffffffffffffff8, 0x400, 0x7ffffffe, 0x0}, {0xc0000005, 0x0, 0x0, 0x7ff, 0x8, 0x0}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f000028f000-0x18)={0x100000, 0x4004, 0x7, 0x3, 0x6}) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x3) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x38) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000af9000)={0x20, 0x0}) mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000afd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00005af000)={0x3, 0x0, [{0xc0010141, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x205}, {0xbdd, 0x0, 0x9}]}) 2017/12/05 17:10:28 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc04000)=nil, 0xc04000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f000067b000)={0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, &(0x7f0000786000-0x4)=0x1c, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00009d5000)="2f6465762f736e642f73657100", 0x0, 0x20042) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00006ca000)={0x0, @in6={{0xa, 0x3, 0x4bac6d7e, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000fe9000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000b90000)={r2, @in6={{0xa, 0x0, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x100}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00007c8000)=0x8c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000047000)={0x0, 0x0, 0x0, "e06594d232d12448b0c30905cebdbd09c0a763e204c2a32152615df55d05092d3c12ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000d33000)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x103, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00003dd000-0x5c)={0x7ff, 0x0, {0x0, 0x1, 0x0, 0x5, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00003af000+0xf4b)="2f6465762f6877726e6700", 0x8100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = inotify_init1(0x80800) readv(r3, &(0x7f00001cb000)=[{&(0x7f0000d9e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000040d000-0x45)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x45}, {&(0x7f00001fd000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x3) r4 = syz_open_dev$evdev(&(0x7f000007a000-0x12)="2f6465762f696e7075742f6576656e742300", 0x0, 0x1) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00004aa000-0x70)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = open(&(0x7f000010c000-0x8)="2e2f66696c653000", 0x0, 0x40) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) getpeername$inet6(r5, &(0x7f00003cf000-0x1c)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000796000)=0x1c) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000ae6000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") execveat(r5, &(0x7f0000ccc000-0x8)="2e2f66696c653000", &(0x7f0000ec2000-0x28)=[&(0x7f0000936000)="e06594d232d12448b0c30905cebdbd09c0a763e204c2a32152615df55d05092d3c12ddd25bad4d127eb802407bc093842621790b637ae5ed23d8b2adf92fc9dd", &(0x7f0000d59000-0x5d)="70707031656d302f295b295d736563757269747970707031637075736574707070307070703070726f63706f7369785f61636c5f616363657373296d696d655f7479706575736572766d6e657431266d696d655f747970656264657600", &(0x7f0000826000-0x6)="5c7573657200", &(0x7f0000b26000-0x10)="766d6e6574303a736563757269747900", &(0x7f0000d99000-0x6)="2b6574683100"], &(0x7f0000b58000-0x28)=[&(0x7f00002d3000-0xb)="2f6465762f6877726e6700", &(0x7f0000471000-0x1)="00", &(0x7f0000b1b000)="2f6465762f6877726e6700", &(0x7f0000ad4000-0x13)="73656375726974797b707070302b7070703000", &(0x7f0000bc0000)="2a2e00"], 0x1900) epoll_create(0x5) open(&(0x7f00002b1000-0x8)="2e2f66696c653000", 0x1, 0x102) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000c1f000)={0x1ffd, 0x0}) syz_open_dev$sg(&(0x7f0000751000-0x9)="2f6465762f73672300", 0x4, 0x100) write$evdev(r4, &(0x7f0000f66000)=[{{0x100000, 0x0}, 0x0, 0x100000001, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}], 0x30) lookup_dcookie(0x5, &(0x7f00005ca000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x94) syzkaller login: [ 51.912366] binder: 3327:3328 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 51.913436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pig=3330 comm=syz-executor4 [ 51.915902] binder: 3327:3328 Acquire 1 refcount change on invalid ref 0 ret -22 [ 51.917879] binder: 3327:3328 BC_INCREFS_DONE u0000000000000000 no match [ 51.930120] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 51.930686] binder: 3327:3328 ERROR: BC_REGISTER_LOOPER called without request [ 51.930704] binder: 3327:3328 BC_INCREFS_DONE u0000000000000000 node 1 cookie mismatch 0000000000000002 != 0000000000000000 [ 51.930720] binder: 3327:3328 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 51.930761] binder: 3327:3328 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 51.930769] binder: 3327:3328 Release 1 refcount change on invalid ref 1 ret -22 [ 51.930775] binder: 3327:3328 ERROR: BC_REGISTER_LOOPER called without request [ 51.930783] binder: 3328 RLIMIT_NICE not set [ 51.932750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pig=3332 comm=syz-executor4 [ 51.955111] binder: 3327:3335 BC_INCREFS_DONE u0000000000000000 node 1 cookie mismatch 0000000000000003 != 0000000000000000 [ 51.955135] binder: 3327:3335 got transaction to invalid handle [ 51.955145] binder: 3327:3335 transaction failed 29201/-22, size 40-16 line 2755 [ 51.965260] binder: 3327:3328 ioctl c0306201 2000efd0 returned -14 [ 51.977470] binder: 3327:3328 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 51.977500] binder: 3327:3328 BC_INCREFS_DONE u0000000000000000 no match [ 51.977533] binder: BINDER_SET_CONTEXT_MGR already set [ 51.977542] binder: 3327:3335 ioctl 40046207 0 returned -16 [ 51.979512] binder: 3327:3335 BC_INCREFS_DONE u0000000000000000 no match [ 51.979522] binder: 3327:3335 got transaction to invalid handle [ 51.979531] binder: 3327:3335 transaction failed 29201/-22, size 40-16 line 2755 [ 51.982359] binder_alloc: 3327: binder_alloc_buf, no vma [ 51.982394] binder: 3327:3342 transaction failed 29189/-3, size 0-0 line 2870 [ 51.991902] ALSA: seq fatal error: cannot create timer (-22) [ 52.009777] binder: undelivered TRANSACTION_ERROR: 29189 [ 52.010700] binder: undelivered TRANSACTION_COMPLETE [ 52.010933] ------------[ cut here ]------------ [ 52.010940] kernel BUG at drivers/android/binder_alloc.c:750! [ 52.010953] invalid opcode: 0000 [#1] SMP KASAN [ 52.010959] Dumping ftrace buffer: [ 52.010963] (ftrace buffer empty) [ 52.010965] Modules linked in: [ 52.010974] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 4.15.0-rc2+ #208 [ 52.010978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.010989] Workqueue: events binder_deferred_func [ 52.010995] task: 00000000f87cf8d4 task.stack: 0000000057c20d6c [ 52.011006] RIP: 0010:binder_alloc_deferred_release+0x146/0xa40 [ 52.011010] RSP: 0018:ffff8801d9d0efd8 EFLAGS: 00010293 [ 52.011016] RAX: ffff8801d9cf2080 RBX: ffff8801c887fd80 RCX: ffffffff8403ba56 [ 52.011020] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8801c887fdb0 [ 52.011024] RBP: ffff8801d9d0f138 R08: ffffffff8403b9d9 R09: 0000000000000004 [ 52.011028] R10: ffff8801d9d0efc8 R11: ffffffff87489d60 R12: 0000000000000000 [ 52.011032] R13: dffffc0000000000 R14: ffff8801d9d0f110 R15: ffff8801c887fd90 [ 52.011037] FS: 0000000000000000(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 52.011041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.011045] CR2: 0000000020470fff CR3: 00000001c57d6000 CR4: 00000000001426e0 [ 52.011051] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.011055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.011057] Call Trace: [ 52.011068] ? _binder_inner_proc_lock+0x2c/0x50 [ 52.011083] ? binder_alloc_mmap_handler+0x900/0x900 [ 52.011096] ? do_raw_spin_trylock+0x190/0x190 [ 52.011103] ? do_raw_spin_trylock+0x190/0x190 [ 52.011128] ? _raw_spin_unlock+0x22/0x30 [ 52.011139] binder_proc_dec_tmpref+0x2f3/0x420 [ 52.011148] ? binder_wakeup_thread_ilocked+0x3d0/0x3d0 [ 52.011161] ? do_raw_spin_trylock+0x190/0x190 [ 52.011170] ? binder_free_ref+0x78/0x90 [ 52.011178] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 52.011190] ? _raw_spin_unlock+0x22/0x30 [ 52.011201] binder_deferred_func+0xe22/0x12f0 [ 52.011223] ? binder_cleanup_ref_olocked+0xab0/0xab0 [ 52.011239] ? find_held_lock+0x39/0x1d0 [ 52.011250] ? check_noncircular+0x20/0x20 [ 52.011270] ? process_one_work+0xb2f/0x1be0 [ 52.011289] ? __lock_is_held+0xbc/0x140 [ 52.011311] process_one_work+0xbfd/0x1be0 [ 52.011332] ? pwq_dec_nr_in_flight+0x450/0x450 [ 52.011340] ? finish_task_switch+0x1d3/0x740 [ 52.011346] ? finish_task_switch+0x1aa/0x740 [ 52.011371] ? perf_trace_lock_acquire+0xe3/0x980 [ 52.011387] ? perf_trace_lock+0x900/0x900 [ 52.011394] ? __sched_text_start+0x8/0x8 [ 52.011407] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.011418] ? select_task_rq_fair+0x2770/0x2770 [ 52.011424] ? check_noncircular+0x20/0x20 [ 52.011437] ? find_held_lock+0x39/0x1d0 [ 52.011457] ? lock_acquire+0x1d5/0x580 [ 52.011463] ? worker_thread+0x4a3/0x1990 [ 52.011477] ? lock_release+0xda0/0xda0 [ 52.011485] ? retint_kernel+0x10/0x10 [ 52.011494] ? do_raw_spin_trylock+0x190/0x190 [ 52.011516] worker_thread+0x223/0x1990 [ 52.011545] ? process_one_work+0x1be0/0x1be0 [ 52.011555] ? _raw_spin_unlock_irq+0x27/0x70 [ 52.011565] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 52.011573] ? trace_hardirqs_on+0xd/0x10 [ 52.011579] ? _raw_spin_unlock_irq+0x27/0x70 [ 52.011587] ? finish_task_switch+0x1d3/0x740 [ 52.011594] ? finish_task_switch+0x1aa/0x740 [ 52.011606] ? copy_overflow+0x20/0x20 [ 52.011625] ? __schedule+0x8f3/0x2060 [ 52.011630] ? check_noncircular+0x20/0x20 [ 52.011652] ? find_held_lock+0x39/0x1d0 [ 52.011667] ? find_held_lock+0x39/0x1d0 [ 52.011686] ? lock_downgrade+0x980/0x980 [ 52.011695] ? default_wake_function+0x30/0x50 [ 52.011711] ? __schedule+0x2060/0x2060 [ 52.011716] ? do_wait_intr+0x3e0/0x3e0 [ 52.011727] ? do_raw_spin_trylock+0x190/0x190 [ 52.011736] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 52.011745] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 52.011754] ? trace_hardirqs_on+0xd/0x10 [ 52.011760] ? __kthread_parkme+0x175/0x240 [ 52.011770] kthread+0x37a/0x440 [ 52.011777] ? process_one_work+0x1be0/0x1be0 [ 52.011782] ? kthread_stop+0x7b0/0x7b0 [ 52.011791] ret_from_fork+0x24/0x30 [ 52.011811] Code: e8 00 3e 6c fd 49 8d 7f 20 49 8d 5f f0 48 89 fa 48 c1 ea 03 42 80 3c 2a 00 0f 85 84 07 00 00 49 83 7f 20 00 74 a9 e8 da 3d 6c fd <0f> 0b 48 8b 9d e8 fe ff ff 44 89 a5 bc fe ff ff e8 c5 3d 6c fd [ 52.011938] RIP: binder_alloc_deferred_release+0x146/0xa40 RSP: ffff8801d9d0efd8 [ 52.011983] ---[ end trace 27a754f4d1f9c275 ]--- [ 52.011987] Kernel panic - not syncing: Fatal exception [ 52.020368] Dumping ftrace buffer: [ 52.020370] (ftrace buffer empty) [ 52.020373] Kernel Offset: disabled [ 52.556424] Rebooting in 86400 seconds..