route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3c000-0x8)={&(0x7f0000a17000-0x48)=@ipmr_newroute={0x28, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e86000-0x1f)="170000004a00070000001bff7f0008ff0a36800000", 0x15) 2018/02/10 11:51:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000fd7000-0x10), &(0x7f0000000000), 0x1fffffff) 2018/02/10 11:51:07 executing program 5: r0 = getpgrp(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001000-0x8)=0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000dab000-0x8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a0a000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000400000/0x1000)=nil) sched_setattr(0x0, &(0x7f00005ec000-0x30), 0x0) 2018/02/10 11:51:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000028000-0xc)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000026000)={0x14, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e86000-0x1f)="170000004a00070000001bff7f0008ff0a3680000000", 0x16) 2018/02/10 11:51:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3c000-0x8)={&(0x7f0000a17000-0x48)=@ipmr_newroute={0x28, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000028000-0xc)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000026000)={0x14, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e86000-0x1f)="170000004a00070000001bff7f0008ff0a3680000000", 0x16) 2018/02/10 11:51:07 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:07 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3c000-0x8)={&(0x7f0000a17000-0x48)=@ipmr_newroute={0x28, 0x18, 0xc21, 0xffffffffffffffff, 0xffffffffffffffff, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000e86000-0x1f)="170000004a00070000001bff7f0008ff0a3680000000", 0x16) 2018/02/10 11:51:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f000089b000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000cb5000-0x8)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000fc3000-0x8)={0x0, 0xffffffffffffffff}) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 1: msgctl$IPC_SET(0x0, 0x1, &(0x7f00005d6000-0x78)) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000007e000-0xf)='/dev/sequencer\x00', 0x6001, 0x0) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r0}}, &(0x7f0000001000-0x10)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}, {r1}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r0}}, &(0x7f0000001000-0x10)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}, {r1}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 5: perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x0, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 5: perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r0}}, &(0x7f0000001000-0x10)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}, {r1}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 0: clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 5: perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 0: clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x0, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 0: clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x0, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x20000000) 2018/02/10 11:51:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x0) 2018/02/10 11:51:08 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:08 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x0) 2018/02/10 11:51:08 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:08 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:08 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000036c000-0x4), 0x5, 0x0, &(0x7f0000943000-0x10), &(0x7f0000000000), 0x0) 2018/02/10 11:51:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:09 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:09 executing program 3: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:09 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:09 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:09 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:09 executing program 3: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:09 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000), 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:09 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000018000)) 2018/02/10 11:51:09 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000), 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:09 executing program 3: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000457000-0x8), &(0x7f0000d2f000-0x10)) 2018/02/10 11:51:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:09 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:09 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:09 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:09 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:09 executing program 3: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000c4c000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/02/10 11:51:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:10 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:10 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000), 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f000099a000-0x8)='./file0\x00', 0x0) lseek(r0, 0x0, 0x1) 2018/02/10 11:51:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:10 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff817e8350, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000b00000), 0x0) 2018/02/10 11:51:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:10 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:10 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:10 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:10 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:10 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:10 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:10 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:10 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:11 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:11 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:11 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f000000b000-0x3d)="dc", 0x1) readv(0xffffffffffffffff, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000015000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff817e8350}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:11 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:11 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f000000b000-0x3d)="dc", 0x1) readv(0xffffffffffffffff, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:11 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x24, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/10 11:51:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000a86000-0x6)={0x7, 0x8, 0x9}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000848000)=@req3={0xbe1, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10001}, 0x1c) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:11 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:11 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f000000b000-0x3d)="dc", 0x1) readv(0xffffffffffffffff, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x1c, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, []}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:11 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:12 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x1c, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, []}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:12 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:12 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000a86000-0x6)={0x7, 0x8, 0x9}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000848000)=@req3={0xbe1, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10001}, 0x1c) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:12 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00006b2000-0xc)={0x10}, 0xc, &(0x7f0000712000-0x10)={&(0x7f0000830000)=@bridge_newneigh={0x1c, 0x1c, 0x813, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, []}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:12 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:12 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:12 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000a86000-0x6)={0x7, 0x8, 0x9}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000848000)=@req3={0xbe1, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10001}, 0x1c) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:12 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000a86000-0x6)={0x7, 0x8, 0x9}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000848000)=@req3={0xbe1, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10001}, 0x1c) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:12 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:12 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:12 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:12 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:12 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:12 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:13 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:13 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:13 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000a86000-0x6)={0x7, 0x8, 0x9}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000848000)=@req3={0xbe1, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10001}, 0x1c) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:13 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:13 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:13 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:13 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:13 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:13 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000a86000-0x6)={0x7, 0x8, 0x9}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000848000)=@req3={0xbe1, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10001}, 0x1c) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:13 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:13 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000), &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:13 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:13 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000), &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000fb8000-0x12)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000e39000-0x7)) 2018/02/10 11:51:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:13 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:13 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x0) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:13 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000), &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b92000-0x7)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, &(0x7f000038d000-0x69), 0x0, 0x0, &(0x7f0000822000-0x10)={0x2, 0x0, @empty}, 0x10) sendfile(r0, r1, &(0x7f0000af5000), 0x10001) 2018/02/10 11:51:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:13 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8), 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:13 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x0) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000de6000)={r1, 0x3}, &(0x7f0000576000)=0x6) 2018/02/10 11:51:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000a86000-0x6)={0x7, 0x8, 0x9}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:13 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:13 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) [ 296.334645] audit: type=1400 audit(1518263473.940:74): avc: denied { net_bind_service } for pid=5620 comm="syz-executor6" capability=10 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/10 11:51:14 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:14 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x0) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000de6000)={r1, 0x3}, &(0x7f0000576000)=0x6) 2018/02/10 11:51:14 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:14 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8), 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') add_key$keyring(&(0x7f00009d5000)='keyring\x00', &(0x7f00000ce000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:14 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8), 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:14 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:14 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000de6000)={r1, 0x3}, &(0x7f0000576000)=0x6) 2018/02/10 11:51:14 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_create1(0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:14 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:14 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(0xffffffffffffffff, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:14 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) sysfs$1(0x1, &(0x7f0000bc1000)='/dev/loop-control\x00') syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:14 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000de6000)={r1, 0x3}, &(0x7f0000576000)=0x6) 2018/02/10 11:51:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001c000-0xc)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000704000)={0xa, 0x1}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000de6000)={r1, 0x3}, &(0x7f0000576000)=0x6) 2018/02/10 11:51:15 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:15 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(0xffffffffffffffff, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:15 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:15 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x0, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000de6000)={r1, 0x3}, &(0x7f0000576000)=0x6) 2018/02/10 11:51:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:15 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(0xffffffffffffffff, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) r2 = syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000de6000)={r1, 0x3}, &(0x7f0000576000)=0x6) 2018/02/10 11:51:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001c000-0xc)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:15 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:15 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x0, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:15 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x0, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) syz_open_dev$adsp(&(0x7f0000f64000)='/dev/adsp#\x00', 0xbf7b, 0x800) 2018/02/10 11:51:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001c000-0xc)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:15 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x0, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:15 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d), 0x0) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:16 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x0, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001c000-0xc)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:16 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d), 0x0) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:16 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}], 0x1, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:16 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x0, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:16 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d), 0x0) readv(r0, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001c000-0xc)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:16 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:16 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000001c000-0xc)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:16 executing program 4: timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:16 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(0xffffffffffffffff, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:16 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}], 0x1, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:16 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:16 executing program 4: timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:16 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(0xffffffffffffffff, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:16 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:16 executing program 4: timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:17 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(0xffffffffffffffff, &(0x7f000000e000-0x20)=[{&(0x7f000022b000)=""/1, 0x1}], 0x1) 2018/02/10 11:51:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:17 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}], 0x1, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:17 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:17 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:17 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[], 0x0) 2018/02/10 11:51:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:17 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[], 0x0) 2018/02/10 11:51:17 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{0xffffffffffffffff}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:17 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:17 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:17 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:17 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:17 executing program 3: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82) write(r0, &(0x7f000000b000-0x3d)="dc", 0x1) readv(r0, &(0x7f000000e000-0x20)=[], 0x0) 2018/02/10 11:51:17 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:17 executing program 1: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002000-0x38)={&(0x7f000000e000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev}, 0x1c, &(0x7f0000012000-0x10)=[], 0x0, &(0x7f0000012000-0x5)=""/5, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000002000-0x28)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x1, 0x7a}], {0x95}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000d000-0xc3)=""/195}, 0x48) 2018/02/10 11:51:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:18 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x8db) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000ceb000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000f6c000)=0x0) io_submit(r1, 0x1, &(0x7f0000b53000-0x28)=[&(0x7f0000595000-0x40)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00005be000), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/10 11:51:18 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{0xffffffffffffffff}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000042d000)='net/igmp6\x00') sendfile(r0, r0, &(0x7f0000064000-0x8), 0x8002) 2018/02/10 11:51:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:18 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map={0x6ef008}}) 2018/02/10 11:51:18 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{0xffffffffffffffff}, {r2}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000520000-0xd)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5b000-0x28)={@common='gre0\x00', @ifru_settings={0x2, 0x0, @raw_hdlc=&(0x7f00004a3000)}}) 2018/02/10 11:51:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map}) 2018/02/10 11:51:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:18 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000efa000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map}) 2018/02/10 11:51:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x0, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000)={0x0}, &(0x7f0000528000+0xb0b)=0xc) sched_getattr(r6, &(0x7f0000ce3000-0x30), 0x30, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:19 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}], 0x1, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00007bb000-0x28)={@common='gre0\x00', @ifru_map}) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}], 0x1, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x0, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000bec000-0x3c)=[{{&(0x7f00001fa000-0x10)=@ethernet={0x0, @remote}, 0x10, &(0x7f0000024000)=[], 0x0, &(0x7f0000c59000-0x14)=""/20, 0x14}}], 0x1, 0x0, 0x0) write(r0, &(0x7f00009bd000-0x2b)="26000000120047f181ff050d43000100fffffffdc200ffff0000000009227fff050019000007", 0x26) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r2}], 0x1, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000f8a000), &(0x7f0000528000+0xb0b)=0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {0xffffffffffffffff}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x0, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @rand_addr}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f41000-0x8)=[{0x6, 0x0, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, &(0x7f0000a89000-0x78), 0x45f, 0x200007ff, &(0x7f0000e68000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000092c000)={&(0x7f0000479000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10, &(0x7f0000160000)=[{&(0x7f00000ca000)="f9b1a376f03ac4d5d45ee512cb30e343b09db20295fec94984c9c3c8f1ffefd08b8079771cfd84ddd4784c3215926eea38eb4801f183febcffc6e36c60433024fdc83f649a90617d9b4d1d0cdce7b167439c5e3a19ae23cf85a6ad5aa06ce996c332a6d1f16ea54eee65a82932ae8bca567f1286e424337982e341ad52f0c2ff8974ed9d9bc48711b099991d8ff82fae71368fe4fbf3ad33dd42fd6b5118f7f74d4a096fb1d3086c2446af3b6c9eb8d629d065279871a388f39be4663a0bf90155e09e04b3fa27dfb29bb7c528f21a964a0c886f4337471e1bf078dda056573d8e38681cf5ba0eb14b386d1884d1ccb1b90ac39c903d7328307dc74e225f20c34d5e3a021e6d6929c2459fd691ac1860a08fe53ba7314f15ce0c0a4b6720e23743838769538270e1961f64966b5c74b818af434580f36b60a8aacd47731cc5ca67d3486c30fea54114f284eb69e25d64e56f60ce5f573a8162c795bcf52912ac269ac62e8482ec7955726786848f4619baf0c16be0efacc0d0cf9833991c9cbc948e5e37cb4dd086bcf5b18a6814695fc00acac4e3df0dfb82c0ac2c218a746ba9ee85276bf9f79d4c193817d743c7c292c196dfb43e89664fd7a65257285daab25a746c255b6b3d61d22ad3f4a6c84177a3aa12a76d6f98608d468284b0c22ec7eaa97f68c637eea63f6e96ff8b6ebb691f9b2c8e65a86925a6c8053be975d92327fd3827a958cb7c0242ed24f9c8a50a272b85971be1457ed77d6b9883dbab5b279f994036030d37273803bac01a80372af647dedbee9047f0f451a7364bc10a91ad7615a1cdea1e9ce135776f179c0853fbdbbc971d761372aadbf8508d571588e65109242d0edf47d961edd86dc24ad89d5b2d4ecb7043193b5885745fd19a3368de6964cc81391c02aec50807d5a8dd8f50bbc909d04c9f6112cd98396727006f6555455da9499fcd8814d2f2b80707299ed58fc87d43f974d883c1da8af43992874d5a8d78ccf800d801e2f3b32ac4e0599059d4ed20a3807cc4b7a652b5644045d72e7f1f32f9abd67bb35e336456cfa47315f91530a3aabfaef782bb06738e4c0096d2cdb0d4e235a3f3c09eaa884e96aacb314b6661697cf81efb1e86a92cde7fbefa94e0369da65db21a25b7e496e2d188551efeaf05d95911fda8b99f47ec02ec8c3ac9b409782373e704cbce2d3db388cafe67e5ea0494973264fb4356194826c1dfbcb2483c8710b02ee7fac48d825839fc1bea934181cf0fb046d242f0de9e2f6290a7b0a6b5f92d7781de79e8d2d4c4742b076475ca8bd36ea9f04ac04e600b1ec3d18acbf52bfc1ed687cecebd8fc6bf71de5bc3b1277f1952cd36ae20c2081ef0ab7ff868c9db947ab6a57376fa1a5d48642c9af59d9f884288fbaca661df91e3d22ee8912d16665c80292425e42a01e0df26cd61ef1e0822e97e3b9d6bb2452f69ba820375ba157d9c52438a8afd22a45626395d009e72f81ef574f11508921e90355d22c15f72c230bbd34cee575b2226b8215620e1e1106163ffa90976fb5d6c460464c7cd67c854ccd551aa55b2e091ba4462984d0a2bc90755e60b544701a9d30efd5d3d3d8b26c8ed342a6b3fb73a1ee0c062bc0c55869405c48666712353ed4d029b5047db3d1921cccc2e765384f957dc00ba38092e548e8a9fbee3110d3cdce5e227dbc2a4cc07586bd71f906eac831b828212a7bdd9d7f3eb9da6074b3f489b1feac9f2ef2964fcec324b382b04046dc89b75c7e2950ed7427c537a4a12f1a2fd734865d1d9b676b0322c3045e4fc81cb943e66cbe57e6a828e73a0ae673b9f53a726104b8854ca66e9f63ea341", 0x51b}], 0x1, &(0x7f0000bb4000)=[]}, 0x0) 2018/02/10 11:51:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {0xffffffffffffffff}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000fd0000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f0000011000)={{}, {r1}}, &(0x7f0000001000-0x10)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001000-0x8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000fd4000-0xc)='/dev/rfkill\x00', 0x2a0400, 0x0) ppoll(&(0x7f00001c5000-0x18)=[{r3}, {0xffffffffffffffff}], 0x2, &(0x7f0000fd5000-0x10), &(0x7f0000fd4000), 0x8) 2018/02/10 11:51:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x0, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:19 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000968000-0x1c)=@req3={0x8000, 0x3}, 0x1c) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x0, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:19 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:19 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:19 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:19 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x0, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/02/10 11:51:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x0, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x0, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) recvmsg(0xffffffffffffffff, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(0xffffffffffffffff, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x0, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(0xffffffffffffffff, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) recvmsg(0xffffffffffffffff, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(0xffffffffffffffff, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) recvmsg(0xffffffffffffffff, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8), 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r0, r1}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8), 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:20 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r0, r1}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:20 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9", 0x29, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:21 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:21 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r0, r1}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:21 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8), 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:21 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9", 0x29, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:21 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, r1+10000000}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:21 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:21 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:21 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9", 0x29, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, 0x0}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52", 0x3d, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, 0x0}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:22 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52", 0x3d, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52", 0x3d, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f000014b000)={0x0, 0x1f, 0x0, @tid}, &(0x7f00002d4000-0x4)) timer_settime(0x0, 0x0, &(0x7f00000e5000-0x20)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f000094c000)) timer_create(0x2, &(0x7f0000979000-0x60)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000c13000-0x10)={0x77359400}, &(0x7f0000559000-0x10)) clock_gettime(0x0, &(0x7f0000122000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00007a4000-0x20)={{0x77359400}, {0x0, 0x0}}, &(0x7f00006dd000-0x20)) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d1", 0x47, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[], 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[], 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d1", 0x47, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000002000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125f, &(0x7f0000381000)) 2018/02/10 11:51:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[], 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d1", 0x47, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x0, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fb", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fb", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(0xffffffffffffffff, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(0xffffffffffffffff, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fb", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:22 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:22 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:23 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(0xffffffffffffffff, 0x5402, &(0x7f0000a27000-0x14)={0x7fffffe}) 2018/02/10 11:51:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:23 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18", 0x4f, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:23 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:23 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:23 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:23 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:23 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)) 2018/02/10 11:51:23 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18", 0x4f, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18", 0x4f, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:23 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:23 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)) 2018/02/10 11:51:23 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:23 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:23 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000202000-0x4)=0x7fff) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a27000-0x14)) 2018/02/10 11:51:23 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:23 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:23 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:23 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b4", 0x50, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:23 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:23 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:24 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b4", 0x50, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b4", 0x50, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000c9f000-0xa)='/dev/vcs#\x00', 0xfff, 0x4002) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0xf40000)=nil, 0xf40000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000688000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d0b000-0xb9), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00007e0000)={&(0x7f0000d2e000)=@rc, 0x9, &(0x7f0000a04000-0x20)=[], 0x0, &(0x7f0000d98000-0xcf)=""/207, 0xcf}, 0x0) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00004b1000)='./file0\x00', 0x0) mount(&(0x7f00009eb000)='./file0/file0\x00', &(0x7f0000c1c000-0x8)='./file0\x00', &(0x7f0000a6f000)='nfs4\x00', 0x0, &(0x7f0000dee000-0xd1)='vE') 2018/02/10 11:51:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000002000-0x3)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) [ 307.056439] NFS: bad mount option value specified: vE [ 307.063898] xt_TCPMSS: Only works on TCP SYN packets 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) [ 307.114154] NFS: bad mount option value specified: vE [ 307.119894] xt_TCPMSS: Only works on TCP SYN packets 2018/02/10 11:51:24 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$addseals(r0, 0x409, 0x0) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(0xffffffffffffffff, &(0x7f000000b000-0x21)={0x30, 0x5, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001c000-0xc)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000058000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049f000-0x60)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) [ 307.220005] xt_TCPMSS: Only works on TCP SYN packets 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x98}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x0, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x0, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) [ 307.305060] xt_TCPMSS: Only works on TCP SYN packets 2018/02/10 11:51:24 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:24 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:24 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:24 executing program 4: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000b000-0x21)={0x30, 0x0, 0x0, @fuse_notify_retrieve_out}, 0x30) 2018/02/10 11:51:24 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:24 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) [ 307.377650] xt_TCPMSS: Only works on TCP SYN packets 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x10, &(0x7f0000d54000-0x2c)=[@in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) [ 307.480426] xt_TCPMSS: Only works on TCP SYN packets 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x10, &(0x7f0000d54000-0x2c)=[@in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x10, &(0x7f0000d54000-0x2c)=[@in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) [ 307.636068] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) [ 307.678833] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) [ 307.758368] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 7: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(0xffffffffffffffff, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(0xffffffffffffffff, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 7: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(0xffffffffffffffff, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x1, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)) ioctl(r0, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 7: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x1c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x1c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x1c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000002000-0x51)="54f914a0dcc0692f424ebda9d0d59e51d8cfebca9650098bd2998b536de5ae4385432d1895ebc413d9889751d60264d2901cb0d1569dfac9249b61cd52e5f12a1c748c4bb573d18be7ff92fbfdfe18b401", 0x51, 0x0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) bind$inet6(r0, &(0x7f0000002000-0x3)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000376000-0x10)={0x0, 0x2c, &(0x7f0000d54000-0x2c)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}]}, &(0x7f0000bd8000-0x4)=0x10) 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0x0, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0x0, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000005000-0x20)=[], 0x0, &(0x7f0000006000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') setns(r0, 0x0) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000005000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000)=[], 0x0, &(0x7f0000002000-0x108)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15}) ioctl(r0, 0x0, &(0x7f0000002000-0x9c)) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:25 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:25 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:25 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:25 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:25 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:25 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:25 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x0, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x0, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x0, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:26 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) [ 309.280520] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 2018/02/10 11:51:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:26 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:26 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) [ 309.411978] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 309.472934] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x20, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x14, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x20, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) [ 309.584979] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}, @common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x14, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r0, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) [ 309.659584] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x20, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x14, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r0, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x18, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r0, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 309.750453] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) [ 309.823006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x18, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@l2tp={0x30, 'l2tp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) 2018/02/10 11:51:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x320) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x18, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba3000-0xc)={0x10}, 0xc, &(0x7f0000435000-0x10)={&(0x7f0000b78000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x320) [ 309.943057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.946177] dccp_invalid_packet: pskb_may_pull failed [ 309.997973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @binary}]}]}, 0x20}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000f5f000)='net/fib_triestat\x00') 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 7: mmap(&(0x7f0000000000/0x2f000)=nil, 0x2f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000001d000-0x3f0)=@security={'security\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f000002d000-0x40), {[{{@ip={@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0x0, 0x0, @generic="c948c987ba41f7719a8e84eb8d073644", @generic="d0cc012d8d1dc31bf4aabe1df811937d", {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x320) 2018/02/10 11:51:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:27 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c0) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000016000-0x10)={&(0x7f000000f000-0xd8)={0x20, 0x28, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @binary}]}]}, 0x20}, 0x1}, 0x0) [ 310.125374] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:27 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) [ 310.187411] dccp_invalid_packet: pskb_may_pull failed 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(0xffffffffffffffff, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000782000-0x2)='\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000472000)='ns/uts\x00') rt_sigaction(0x7, &(0x7f0000aa9000-0x20)={0x42842f, {0x400003ffffffe}}, &(0x7f00009fb000), 0x8, &(0x7f0000e83000-0x8)) syz_open_dev$sg(&(0x7f000077e000-0x9)='/dev/sg#\x00', 0x0, 0x0) 2018/02/10 11:51:27 executing program 7: r0 = gettid() kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:27 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:27 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:27 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:27 executing program 7: r0 = gettid() kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(0xffffffffffffffff, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffd, &(0x7f0000044000)={0x0, 0x14, 0x0, @thr={&(0x7f0000a86000-0x98), &(0x7f00009d0000)}}, &(0x7f0000454000)) timer_settime(0x0, 0x0, &(0x7f0000fcf000)={{}, {0x0, 0x989680}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f00007af000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(0xffffffffffffffff, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:27 executing program 7: r0 = gettid() kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:27 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:27 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:27 executing program 0: mmap(&(0x7f0000000000/0x3ae000)=nil, 0x3ae000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x21) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f000000b000), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@empty, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='gre0\x00', @syzn={0x73, 0x79, 0x7a}}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, @common='bpq0\x00', @generic="40bef860d695fecfd71a432d3741ecdd"}, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x380) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000d000-0x10)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000000c000)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/10 11:51:27 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:28 executing program 7: r0 = getpgrp(0xffffffffffffffff) kcmp(0x0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:28 executing program 7: r0 = getpgrp(0xffffffffffffffff) kcmp(0x0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:28 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:28 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:28 executing program 7: r0 = getpgrp(0xffffffffffffffff) kcmp(0x0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x6, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:28 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:28 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(0x0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x14, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:28 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(0x0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:28 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(0x0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x14, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x14, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/10 11:51:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:28 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={0xffffffffffffffff, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:28 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x0, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:28 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:28 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:28 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={0xffffffffffffffff, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:28 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x0, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:29 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:29 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={0xffffffffffffffff, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:29 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x0, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:29 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x1c, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x8, 0x0, [@generic="aa"]}]}, 0x1c}, 0x1}, 0x0) 2018/02/10 11:51:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) 2018/02/10 11:51:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x18, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x6, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:29 executing program 7: r0 = gettid() r1 = getpgrp(0xffffffffffffffff) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001000-0x4), 0x1) 2018/02/10 11:51:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:29 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x18, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x6, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:29 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) 2018/02/10 11:51:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x0, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x18, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x6, []}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x18, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x6, [@generic]}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x0, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x18, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x6, [@generic]}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00006da000-0xc)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000715000-0x290)={0x18, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x6, [@generic]}]}, 0x18}, 0x1}, 0x0) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x0, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x0, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) 2018/02/10 11:51:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x0, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0x0, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:30 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0x0, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:30 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0x0, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:30 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:30 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) sendfile(0xffffffffffffffff, r1, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x0, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x0, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) readv(r4, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) sendfile(0xffffffffffffffff, r1, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x0, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54db", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) sendfile(0xffffffffffffffff, r1, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:31 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54db", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x0, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={r0, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:31 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={0xffffffffffffffff, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:31 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:31 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={0xffffffffffffffff, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:31 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54db", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) [ 314.548103] IPVS: ftp: loaded support on port[0] = 21 [ 314.789455] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/10 11:51:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000c6000-0x1c)={0x5, 0xc, 0x1ff, 0x100000000000c, 0x0, 0xffffffffffffffff}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000099000-0x18)={0xffffffffffffffff, &(0x7f000053e000-0x1), &(0x7f0000109000)}, 0x18) 2018/02/10 11:51:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:32 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) sendfile(r0, r1, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:32 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) sendfile(r0, r1, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:32 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:32 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:33 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:33 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) sendfile(r0, r1, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:33 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:33 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:33 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) [ 316.166523] IPVS: ftp: loaded support on port[0] = 21 [ 316.442361] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/10 11:51:34 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:34 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00007ab000), 0x4) 2018/02/10 11:51:34 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:34 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/02/10 11:51:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:34 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:34 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) 2018/02/10 11:51:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:35 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:35 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) 2018/02/10 11:51:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:35 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:35 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:35 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:35 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) [ 319.178703] IPVS: ftp: loaded support on port[0] = 21 [ 319.425574] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/10 11:51:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) 2018/02/10 11:51:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[], 0x0, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:37 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:37 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:37 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:37 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:37 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:37 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[], 0x0, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:37 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) [ 320.777575] IPVS: ftp: loaded support on port[0] = 21 [ 321.017571] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/10 11:51:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[], 0x0, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0x0, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0x0, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:39 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(0xffffffffffffffff, 0x8, r2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) readv(0xffffffffffffffff, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:39 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:39 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:39 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a9", 0x40}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0x0, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a9", 0x40}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:40 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(0xffffffffffffffff, 0x8, r2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) readv(0xffffffffffffffff, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:40 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a9", 0x40}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:40 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:40 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:40 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:40 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:41 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(0xffffffffffffffff, 0x8, r2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) readv(0xffffffffffffffff, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fce", 0x60}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:41 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) 2018/02/10 11:51:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:41 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fce", 0x60}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:41 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(0xffffffffffffffff, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(0xffffffffffffffff, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{0xffffffffffffffff}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:41 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:41 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:41 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x0) [ 324.951603] IPVS: ftp: loaded support on port[0] = 21 [ 325.196051] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/10 11:51:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(0xffffffffffffffff, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(0xffffffffffffffff, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{0xffffffffffffffff}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fce", 0x60}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x0) 2018/02/10 11:51:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(0x0, 0x16) 2018/02/10 11:51:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859", 0x70}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:43 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) writev(r0, &(0x7f0000e41000)=[], 0x0) getpriority(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00008c8000-0x10)='/selinux/access\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000244000)='/dev/admmidi#\x00', 0x800, 0x480000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002e0000-0x4)=0x5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000212000)={0x0, 0xf4, 0x7fffffff}) syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x0) 2018/02/10 11:51:43 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(0xffffffffffffffff, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(0xffffffffffffffff, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{0xffffffffffffffff}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:43 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859", 0x70}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:43 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:43 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(0x0, 0x16) 2018/02/10 11:51:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) r2 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:43 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:43 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 326.583709] IPVS: ftp: loaded support on port[0] = 21 [ 326.829214] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/10 11:51:44 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(0x0, 0x16) 2018/02/10 11:51:44 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:44 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:44 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859", 0x70}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:44 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:44 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) r2 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:44 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:44 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9", 0x78}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9", 0x78}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 2: mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00004eb000-0x8), 0x2) 2018/02/10 11:51:45 executing program 2: mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9", 0x78}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x0) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 2: mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x0) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000595000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x4) sendfile(r1, r2, &(0x7f00004eb000-0x8), 0x0) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a", 0x7c}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:45 executing program 3: mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 3: mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 4: prctl$setmm(0x23, 0xe, &(0x7f00003e9000/0x1000)=nil) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a", 0x7c}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 3: mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 4: prctl$setmm(0x23, 0xe, &(0x7f00003e9000/0x1000)=nil) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 4: prctl$setmm(0x23, 0xe, &(0x7f00003e9000/0x1000)=nil) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a", 0x7c}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 4: prctl$setmm(0x23, 0xe, &(0x7f00003e9000/0x1000)=nil) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 2018/02/10 11:51:45 executing program 4: prctl$setmm(0x23, 0x0, &(0x7f00003e9000/0x1000)=nil) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c", 0x7e}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(0xffffffffffffffff, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 4: prctl$setmm(0x23, 0x0, &(0x7f00003e9000/0x1000)=nil) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c", 0x7e}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(0xffffffffffffffff, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000d2b000)=[{r2}], 0x1, 0x0) 2018/02/10 11:51:45 executing program 4: prctl$setmm(0x23, 0x0, &(0x7f00003e9000/0x1000)=nil) 2018/02/10 11:51:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c", 0x7e}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(0xffffffffffffffff, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c08", 0x7f}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r1, 0xa, 0x12) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000), 0x0) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000), 0x0) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c08", 0x7f}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:45 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000), 0x0) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c08", 0x7f}], 0x1, &(0x7f0000c07000-0x78)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:45 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed", 0x15) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:45 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:45 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/02/10 11:51:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed", 0x15) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed", 0x15) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21", 0x20) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000560000-0xf)='/dev/sequencer\x00', 0x0, 0x0) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21", 0x20) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000063000-0xf)='/dev/sequencer\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21", 0x20) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 5: syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 5: syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000", 0x25) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}, {&(0x7f0000936000+0x161)=""/12, 0xc}], 0x2, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 5: syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000", 0x25) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000936000+0x161)=""/12, 0xc}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000", 0x25) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000936000+0x161)=""/12, 0xc}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc", 0x28) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000936000+0x161)=""/12, 0xc}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc", 0x28) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc", 0x28) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ac1000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00006ad000)={0x0, 0x0, &(0x7f0000f76000-0x80)=[{&(0x7f00004ec000-0xa7)="99eac84d6a3828b426e0d2bd94a372440296e7dbd81f7612aaee2b98e359972268a6af8bb583511ab042180436c76c32970e44798ed07d43ab574b074b21e9a99da113d6d973638d7185a1393c59f311e600d795800c6463d8e082ef7fd88fcef89439af7ad34afa5bdff6616ac8e859bd8d40b974ce6ca9914b019a669c0861", 0x80}], 0x1, &(0x7f0000c07000-0x78)=[]}, 0x0) recvmsg(r1, &(0x7f000022f000-0x38)={&(0x7f0000bb6000-0x10)=@ethernet={0x0, @random}, 0x10, &(0x7f00008b2000-0x50)=[{&(0x7f0000768000)=""/121, 0x79}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x0, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b", 0x29) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x0, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b", 0x29) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000074b000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(anubis)\x00'}, 0x58) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) r1 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x16) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x0, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x0, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x0, 0x3, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x0, &(0x7f0000ad5000)) 2018/02/10 11:51:46 executing program 6: mmap(&(0x7f0000000000/0x425000)=nil, 0x425000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000003000-0x10)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0, 0x15}}, 0x10) set_mempolicy(0x3, &(0x7f0000425000-0x8)=0x9, 0x6) sendmsg$rds(r0, &(0x7f0000007000-0x38)={&(0x7f0000014000)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000)=[], 0x0, &(0x7f000000f000)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000013000-0xba)=""/186, 0xba}, &(0x7f0000006000)=[{&(0x7f0000014000-0x69)=""/122, 0x15ea15c6}], 0x1}}], 0x48}, 0x0) 2018/02/10 11:51:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b", 0x29) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) [ 329.393734] [ 329.395489] ============================= [ 329.399677] WARNING: suspicious RCU usage [ 329.403869] 4.15.0+ #307 Not tainted [ 329.407601] ----------------------------- [ 329.411778] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 329.421097] [ 329.421097] other info that might help us debug this: [ 329.421097] [ 329.429285] [ 329.429285] rcu_scheduler_active = 2, debug_locks = 1 [ 329.435978] 1 lock held by syz-executor6/9522: [ 329.440580] #0: (rcu_read_lock){....}, at: [<000000009e61da6b>] __rds_conn_create+0xe46/0x1b50 [ 329.449552] [ 329.449552] stack backtrace: [ 329.454068] CPU: 0 PID: 9522 Comm: syz-executor6 Not tainted 4.15.0+ #307 [ 329.460987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.470333] Call Trace: [ 329.472925] dump_stack+0x194/0x257 [ 329.476553] ? arch_local_irq_restore+0x53/0x53 [ 329.481215] lockdep_rcu_suspicious+0x123/0x170 [ 329.485866] ___might_sleep+0x385/0x470 [ 329.489817] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 329.495673] ? debug_mutex_init+0x1c/0x60 [ 329.499797] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.504794] __might_sleep+0x95/0x190 [ 329.508576] kmem_cache_alloc+0x2a2/0x760 [ 329.512696] ? lock_acquire+0x1d5/0x580 [ 329.516646] ? __rds_conn_create+0xe46/0x1b50 [ 329.521116] ? SyS_membarrier+0x700/0x700 [ 329.525238] ? init_timer_key+0x163/0x3f0 [ 329.529367] rds_tcp_conn_alloc+0xa7/0x4e0 [ 329.533581] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 329.537962] ? rds_cmsg_atomic+0xff0/0xff0 [ 329.542176] ? __lockdep_init_map+0xe4/0x650 [ 329.546558] ? rds_cmsg_atomic+0xff0/0xff0 [ 329.550774] __rds_conn_create+0x112f/0x1b50 [ 329.555189] ? rds_conn_drop+0xb0/0xb0 [ 329.559057] ? retint_kernel+0x10/0x10 [ 329.562926] ? __raw_spin_lock_init+0x1c/0x100 [ 329.567494] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.572491] ? __lockdep_init_map+0xe4/0x650 [ 329.576877] ? lockdep_init_map+0x9/0x10 [ 329.580914] ? __init_waitqueue_head+0x97/0x140 [ 329.585561] ? init_wait_entry+0x1b0/0x1b0 [ 329.589778] ? lockdep_init_map+0x9/0x10 [ 329.593821] ? rds_message_alloc+0x28c/0x330 [ 329.598207] ? rds_message_next_extension+0x210/0x210 [ 329.603377] ? rds_rdma_extra_size+0x205/0x2b0 [ 329.607943] ? rds_atomic_free_op+0x330/0x330 [ 329.612411] ? lock_sock_nested+0x91/0x110 [ 329.616624] rds_conn_create_outgoing+0x3f/0x50 [ 329.621275] rds_sendmsg+0xda3/0x2390 [ 329.625072] ? rds_send_drop_to+0x19d0/0x19d0 [ 329.629563] ? find_held_lock+0x35/0x1d0 [ 329.633607] ? sock_has_perm+0x2a4/0x420 [ 329.638388] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 329.643729] ? lock_downgrade+0x980/0x980 [ 329.647856] ? lock_release+0xa40/0xa40 [ 329.651821] ? selinux_socket_sendmsg+0x36/0x40 [ 329.656468] ? security_socket_sendmsg+0x89/0xb0 [ 329.661201] ? rds_send_drop_to+0x19d0/0x19d0 [ 329.665676] sock_sendmsg+0xca/0x110 [ 329.669369] ___sys_sendmsg+0x767/0x8b0 [ 329.673324] ? copy_msghdr_from_user+0x590/0x590 [ 329.678057] ? __schedule+0x8ea/0x2040 [ 329.681930] ? __sched_text_start+0x8/0x8 [ 329.686056] ? lock_release+0xa40/0xa40 [ 329.690013] ? __fget_light+0x2b2/0x3c0 [ 329.693967] ? fget_raw+0x20/0x20 [ 329.697403] ? do_set_mempolicy+0x17f/0x2e0 [ 329.701787] ? lock_downgrade+0x980/0x980 [ 329.705916] ? lock_release+0xa40/0xa40 [ 329.709878] __sys_sendmsg+0xe5/0x210 [ 329.713656] ? __sys_sendmsg+0xe5/0x210 [ 329.717607] ? SyS_shutdown+0x290/0x290 [ 329.721552] ? _raw_spin_unlock+0x22/0x30 [ 329.725683] ? exit_to_usermode_loop+0x8c/0x2f0 [ 329.730341] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 329.735862] SyS_sendmsg+0x2d/0x50 [ 329.739376] ? __sys_sendmsg+0x210/0x210 [ 329.743416] do_syscall_64+0x282/0x940 [ 329.747279] ? __do_page_fault+0xc90/0xc90 [ 329.751489] ? finish_task_switch+0x1e2/0x890 [ 329.755956] ? finish_task_switch+0x1b9/0x890 [ 329.760429] ? syscall_return_slowpath+0x550/0x550 [ 329.765332] ? syscall_return_slowpath+0x2ac/0x550 [ 329.770235] ? prepare_exit_to_usermode+0x350/0x350 [ 329.775226] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 329.780571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.785396] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 329.790558] RIP: 0033:0x453a59 [ 329.793723] RSP: 002b:00007fe9ed89ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.801408] RAX: ffffffffffffffda RBX: 00007fe9ed89b6d4 RCX: 0000000000453a59 [ 329.808652] RDX: 0000000000000000 RSI: 0000000020006fc8 RDI: 0000000000000013 [ 329.815898] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 329.823142] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 329.830385] R13: 00000000000004b5 R14: 00000000006f7198 R15: 0000000000000000 [ 329.837710] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 329.845186] in_atomic(): 1, irqs_disabled(): 0, pid: 9522, name: syz-executor6 [ 329.852584] 1 lock held by syz-executor6/9522: [ 329.857182] #0: (rcu_read_lock){....}, at: [<000000009e61da6b>] __rds_conn_create+0xe46/0x1b50 [ 329.866169] CPU: 0 PID: 9522 Comm: syz-executor6 Not tainted 4.15.0+ #307 [ 329.873081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.882411] Call Trace: [ 329.884975] dump_stack+0x194/0x257 [ 329.888582] ? arch_local_irq_restore+0x53/0x53 [ 329.893228] ? print_lock+0x9f/0xa2 [ 329.896830] ? lockdep_print_held_locks+0xc4/0x130 [ 329.901741] ___might_sleep+0x2b2/0x470 [ 329.905692] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 329.911549] ? debug_mutex_init+0x1c/0x60 [ 329.915673] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.920668] __might_sleep+0x95/0x190 [ 329.924453] kmem_cache_alloc+0x2a2/0x760 [ 329.928576] ? lock_acquire+0x1d5/0x580 [ 329.932612] ? __rds_conn_create+0xe46/0x1b50 [ 329.937081] ? SyS_membarrier+0x700/0x700 [ 329.941202] ? init_timer_key+0x163/0x3f0 [ 329.945330] rds_tcp_conn_alloc+0xa7/0x4e0 [ 329.949544] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 329.953926] ? rds_cmsg_atomic+0xff0/0xff0 [ 329.958139] ? __lockdep_init_map+0xe4/0x650 [ 329.962522] ? rds_cmsg_atomic+0xff0/0xff0 [ 329.966736] __rds_conn_create+0x112f/0x1b50 [ 329.971143] ? rds_conn_drop+0xb0/0xb0 [ 329.975016] ? retint_kernel+0x10/0x10 [ 329.978888] ? __raw_spin_lock_init+0x1c/0x100 [ 329.983449] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.988448] ? __lockdep_init_map+0xe4/0x650 [ 329.992833] ? lockdep_init_map+0x9/0x10 [ 329.996868] ? __init_waitqueue_head+0x97/0x140 [ 330.001513] ? init_wait_entry+0x1b0/0x1b0 [ 330.005730] ? lockdep_init_map+0x9/0x10 [ 330.009768] ? rds_message_alloc+0x28c/0x330 [ 330.014151] ? rds_message_next_extension+0x210/0x210 [ 330.019320] ? rds_rdma_extra_size+0x205/0x2b0 [ 330.023889] ? rds_atomic_free_op+0x330/0x330 [ 330.028356] ? lock_sock_nested+0x91/0x110 [ 330.032571] rds_conn_create_outgoing+0x3f/0x50 [ 330.037217] rds_sendmsg+0xda3/0x2390 [ 330.041016] ? rds_send_drop_to+0x19d0/0x19d0 [ 330.045505] ? find_held_lock+0x35/0x1d0 [ 330.049549] ? sock_has_perm+0x2a4/0x420 [ 330.053590] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 330.058924] ? lock_downgrade+0x980/0x980 [ 330.063050] ? lock_release+0xa40/0xa40 [ 330.067030] ? selinux_socket_sendmsg+0x36/0x40 [ 330.071677] ? security_socket_sendmsg+0x89/0xb0 [ 330.076409] ? rds_send_drop_to+0x19d0/0x19d0 [ 330.080885] sock_sendmsg+0xca/0x110 [ 330.084576] ___sys_sendmsg+0x767/0x8b0 [ 330.088529] ? copy_msghdr_from_user+0x590/0x590 [ 330.093259] ? __schedule+0x8ea/0x2040 [ 330.097128] ? __sched_text_start+0x8/0x8 [ 330.101250] ? lock_release+0xa40/0xa40 [ 330.105207] ? __fget_light+0x2b2/0x3c0 [ 330.109157] ? fget_raw+0x20/0x20 [ 330.112593] ? do_set_mempolicy+0x17f/0x2e0 [ 330.116893] ? lock_downgrade+0x980/0x980 [ 330.121023] ? lock_release+0xa40/0xa40 [ 330.124986] __sys_sendmsg+0xe5/0x210 [ 330.128762] ? __sys_sendmsg+0xe5/0x210 [ 330.132711] ? SyS_shutdown+0x290/0x290 [ 330.136658] ? _raw_spin_unlock+0x22/0x30 [ 330.140807] ? exit_to_usermode_loop+0x8c/0x2f0 [ 330.145465] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 330.150987] SyS_sendmsg+0x2d/0x50 [ 330.154503] ? __sys_sendmsg+0x210/0x210 [ 330.158538] do_syscall_64+0x282/0x940 [ 330.162403] ? __do_page_fault+0xc90/0xc90 [ 330.166613] ? finish_task_switch+0x1e2/0x890 [ 330.171080] ? finish_task_switch+0x1b9/0x890 [ 330.175551] ? syscall_return_slowpath+0x550/0x550 [ 330.180471] ? syscall_return_slowpath+0x2ac/0x550 [ 330.185377] ? prepare_exit_to_usermode+0x350/0x350 [ 330.190369] ? entry_SYSCALL_64_after_hwframe+0x36/0x9b [ 330.195715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.200540] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 330.205703] RIP: 0033:0x453a59 [ 330.208870] RSP: 002b:00007fe9ed89ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.216552] RAX: ffffffffffffffda RBX: 00007fe9ed89b6d4 RCX: 0000000000453a59 [ 330.223798] RDX: 0000000000000000 RSI: 0000000020006fc8 RDI: 0000000000000013 [ 330.231043] RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 [ 330.238286] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 330.245531] R13: 00000000000004b5 R14: 00000000006f7198 R15: 0000000000000000 2018/02/10 11:51:47 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(0xffffffffffffffff, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[]}, {[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x0, &(0x7f0000ad5000)) 2018/02/10 11:51:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x0, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) 2018/02/10 11:51:47 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000749000-0xf8)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0x8, 0x9, 0x3, 0x0, [{[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:47 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(0xffffffffffffffff, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:47 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0x8, 0x9, 0x3, 0x0, [{[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000812000-0x6)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002ba000-0x8)='./file0\x00', &(0x7f0000cbf000-0x8)='./file0\x00', &(0x7f00005f8000-0x6)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000378000-0x8)='.', &(0x7f0000188000-0x8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000add000-0x8)='./file0\x00', &(0x7f0000e09000-0x1)='.', &(0x7f00005e9000)='cifs\x00', 0x0, &(0x7f0000ad5000)) 2018/02/10 11:51:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(0xffffffffffffffff, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000270000)={0x19980330}, &(0x7f0000c0b000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00004aa000-0x28)={@common='bridge0\x00', @ifru_data=&(0x7f00008e8000-0x20)="0900000000000000000305fffe00eb00ecff0000a10000000449faf4e2007e23"}) 2018/02/10 11:51:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59), 0x0) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0x8, 0x9, 0x3, 0x0, [{[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:48 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c9000-0x28)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c20000-0x50)={@common='yam0\x00', @ifru_flags=0x400}) 2018/02/10 11:51:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59), 0x0) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0x8, 0x9, 0x3, 0x0, [{[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00003aa000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000749000-0xf8)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2018/02/10 11:51:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59), 0x0) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0x8, 0x9, 0x3, 0x0, [{[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 331.779011] IPVS: ftp: loaded support on port[0] = 21 [ 332.018917] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/02/10 11:51:50 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c", 0x2c) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f000000b000-0x42)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@timestamp={0x44, 0x8, 0x9, 0x3, 0x0, [{[]}]}]}}, @dccp={{0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6c43f0", 0x0, "fd9dd0"}}}}}}, 0x0) 2018/02/10 11:51:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000022000-0xc)) 2018/02/10 11:51:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000270000)={0x19980330}, &(0x7f0000c0b000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00004aa000-0x28)={@common='bridge0\x00', @ifru_data=&(0x7f00008e8000-0x20)="0900000000000000000305fffe00eb00ecff0000a10000000449faf4e2007e23"}) 2018/02/10 11:51:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000c0b000-0x14)={0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 2018/02/10 11:51:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c", 0x2c) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000270000)={0x19980330}, &(0x7f0000c0b000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00004aa000-0x28)={@common='bridge0\x00', @ifru_data=&(0x7f00008e8000-0x20)="0900000000000000000305fffe00eb00ecff0000a10000000449faf4e2007e23"}) 2018/02/10 11:51:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:50 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4144, &(0x7f0000006000-0x1f5)) 2018/02/10 11:51:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c", 0x2c) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:50 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4144, &(0x7f0000006000-0x1f5)) 2018/02/10 11:51:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00007d3000)='/dev/loop#\x00', 0x0, 0x80) dup2(r0, r1) 2018/02/10 11:51:50 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:50 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4144, &(0x7f0000006000-0x1f5)) 2018/02/10 11:51:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a030489", 0x42) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:50 executing program 3: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4144, &(0x7f0000006000-0x1f5)) 2018/02/10 11:51:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a030489", 0x42) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/02/10 11:51:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a030489", 0x42) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:51 executing program 6: mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:51 executing program 6: mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e", 0x4d) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/02/10 11:51:51 executing program 6: mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e", 0x4d) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e", 0x4d) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/02/10 11:51:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f", 0x53) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f", 0x53) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/02/10 11:51:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f", 0x53) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffa", 0x56) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 2018/02/10 11:51:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 2018/02/10 11:51:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffa", 0x56) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/02/10 11:51:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffa", 0x56) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/02/10 11:51:53 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 2018/02/10 11:51:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/02/10 11:51:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab3", 0x57) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2018/02/10 11:51:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2018/02/10 11:51:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab3", 0x57) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:53 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:53 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:53 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2018/02/10 11:51:53 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:53 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab3", 0x57) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:53 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:53 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:53 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r0, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r0, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(0xffffffffffffffff, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003ba000-0x24)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r0, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(0xffffffffffffffff, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/10 11:51:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(0xffffffffffffffff, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff}}) 2018/02/10 11:51:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)) 2018/02/10 11:51:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[], 0x0) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00006a5000-0x9)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/02/10 11:51:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000014000)=0x100000, 0x1000000800000008) 2018/02/10 11:51:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[], 0x0) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)) 2018/02/10 11:51:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000091c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40045109, &(0x7f0000505000)) 2018/02/10 11:51:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000), 0x1000000800000008) 2018/02/10 11:51:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[], 0x0) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:54 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00001a9000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000ff9000-0x10)={0x28, 0x0, 0x0, @my}, 0x10) 2018/02/10 11:51:54 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000-0x18)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee4000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f000005b000)=0x3) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) readv(r4, &(0x7f0000fa4000)=[{&(0x7f0000fa5000-0x8e)=""/1, 0x1}], 0x1) dup2(r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x16) 2018/02/10 11:51:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000), 0x1000000800000008) 2018/02/10 11:51:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000ded000-0x20)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000461000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000735000-0x8c)={0x0, @in={{0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, &(0x7f0000000000)=0x8c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bff000-0x41)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000754000-0x10)=[], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/02/10 11:51:54 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d6000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setrlimit(0x9, &(0x7f00002d0000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/02/10 11:51:54 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 2018/02/10 11:51:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000bfa000)="b6d3b85e1e8d225db3f3b29d7300000005cc796aed5ed2bc7018ce2c9b97ae21914d870000ffffbc9b16", 0x2a) write(r0, &(0x7f0000e8f000-0x59)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b7000-0x70)=[{&(0x7f0000e43000)}], 0x1) ppoll(&(0x7f0000564000-0x20)=[{r0}], 0x1, &(0x7f0000314000-0x10), &(0x7f0000cee000), 0x8) 2018/02/10 11:51:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f00003cf000)) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/10 11:51:54 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000031000-0x8)='pagemap\x00') sendfile(r0, r0, &(0x7f0000014000), 0x1000000800000008) 2018/02/10 11:51:54 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00001a9000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000ff9000-0x10)={0x28, 0x0, 0x0, @my}, 0x10) 2018/02/10 11:51:54 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0,